www.membermanager.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e6:75:26:e0:b7:d8:15:be:b0:8d:45:e0:a2:c6:c7:14:24 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.membermanager.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e6:75:26:e0:b7:d8:15:be:b0:8d:45:e0:a2:c6:c7:14:24
Serial Number (int): 339757523727709426025182097479405975049252
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:7a:45:d6:b8:09:f1:44:7a:fe:78:cb:5d:04:ed:4a:43:09:88:0c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:52:0b:25:bd:fd:92:66:32:2f:91:8e:bf:ab:60:37:3a:76:ad:ab
Fingerprint (sha256): 80:fd:34:9e:31:73:59:e8:d4:79:d2:50:ef:7c:b5:49:72:c9:c1:dd:26:7d:0b:83:fc:f3:45:25:0d:27:dc:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.membermanager.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.membermanager.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.badminton.org.nz
www.basketballhawkesbay.co.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.bowlsbop.co.nz
www.bowlswaikato.co.nz
www.cashmere.school.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.collegesportsportal.co.nz
www.countiesmanukaurugbyleague.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.eden.rugby
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.glenfieldrugbyleague.co.nz
www.goodmanrural.co.nz
www.greenacrescountry.org.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbnetball.co.nz
www.hbreds.nz
www.hbrugby.co.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.hokowhitubridge.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kerikerimtbclub.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.membermanager.co.nz
www.morningtonbowlingclub.co.nz
www.mountsports.co.nz
www.mtsquashclub.co.nz
www.nzblackpowder.nz
www.otakisportsclub.co.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.ponsonbyrugby.co.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.referees.co.nz
www.sailhbc.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sked.co.nz
www.southcanterbury.basketball
www.sportauckland.nz
www.sportynews.co.nz
www.sumnerbowls.co.nz
www.taradaleint.school.nz
www.tasmanvolley.org.nz
www.tepukeunitedfc.co.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.westlandmotorcycleclub.co.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz

Other certificates including the domain name membermanager.co.nz

(limited to 100 certificates)
www.sportycrm.com
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.sportsground.com
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.membermanager.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl87/QDssTlg3Xn69RpYX
pFFZuNFqCIDODWcL4qe4/7G6tOnTJ82oCrmMiY6qLd3lUMTg67ATGLx3bURXTUu3
xPKxnJrMYN0l3KY7JXBirdAqjZvnfLyWeyFUttQGvJVR4R1KobTm9wTrVQfAolpD
uDNdFvqsDdMlltcjL6KjqlGGNX8EMaNO75r9OkWhfdhHrGwTt1zqNfpDiEa3Jk1t
K1L6LfRPpVrA4q8hcnQHC/ft3e19y0+p/Q3P5HmCWkHRiygQ64+hH2s+9MezUbjN
b+xwAzuRIsq91sEALWlzX/OD/qFSWI7gCLLBo2dgoEIuDIuO3RNhaTeVePhIK2Sz
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 339757523727709426025182097479405975049252
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-25 22:41:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 22:41:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.membermanager.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19164058111337474127010254391727350488133283660490796972764617398789977129927993916576118940125784577718266451880880252765640722241555829459815932614668329838188748201800359119664098111302567997940613878856508835508214427396432743982482178572553677178361263016337412652744517071579701841598986789539225864461855937787194627842430913019660733089759260843620468679150106534840955530743460877129969559616096162778873539416331339900131909659764378804297951230214101635166575507488928091337390105294672382451372454076377912366068880254429663042157324625289267919638467449404667833784147691530762386423338497256764278616881
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e37a45d6b809f1447afe78cb5d04ed4a4309880c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b73ae27b0000040300473045022100e498d6efcce0b9a37e621541e64a92e332c4de93a5f082de397a269d4c75687c0220709a27d58451dfe0c3b625d1662485a32204a2f17aa4bfbb6f40edea1214248c007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169b73ae2820000040300473045022100ac2bc5a75a8f52d0c385d42f59b7d502a8d0ef00c946d20d209e8ed5e328cd1d02207ea82d0e1c2df3caff96bb1ccb7afdce6ea0e1fd98673b535cf1a866cf7a1cbb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001360724750808ee093f7844ba2121de750dc51e2f84adb87cdeb7c46974998616bbcb39419af69cee87d258dbeea76dfdca927b8645b39eccd80cd42600479fc66259c728d818d9738641006bd7b284024c590c9350c124aef5f4c4acde6b327412c1ccc60c5fe69868a7dc7b2a1ff79fe54d695884c58e251edd1d2a5c2b8beba62554b2c9f69c5da8882041104df0fe1d798c928b04fd15ac8f7e17b084131624a86fc6b4fe8efe4dcc2d59803fded1ebd30f307166134dd1a0af46faf6137b203698dca738cad5a6735da78c3f870cf6b5bbc3d3bc016f9958c4bf096a8874f0c9529f8b605f228cba05f372b015ac274fce9d0fb203dd4a3ab57ce942250