northharbourtag.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:19:b6:4c:f1:a8:71:9f:9d:ec:46:db:36:8f:79:a7:f2:23 was issued on by Let's Encrypt.

With 78 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=northharbourtag.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:19:b6:4c:f1:a8:71:9f:9d:ec:46:db:36:8f:79:a7:f2:23
Serial Number (int): 270086235979504515415758511648414013846051
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:98:cd:45:50:b8:80:92:5e:65:eb:c1:2a:0e:69:de:a0:56:1a:b3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:99:cc:76:54:18:bb:ba:18:d4:09:02:4c:01:9a:13:b6:5c:4b:1b
Fingerprint (sha256): 84:98:fa:62:9d:fd:75:8e:95:3a:fb:c6:43:d6:d5:eb:f2:62:14:aa:90:d6:ef:e7:21:dc:18:9b:f4:6e:be:9a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate northharbourtag.co.nz

78

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for northharbourtag.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
ararimu.school.nz
basketballtaranaki.co.nz
boptouch.co.nz
bsgevents.co.nz
bullernetball.co.nz
capitaldarts.co.nz
cornwallparktouch.nz
csa.org.nz
czctc.org.nz
farmpass.co.nz
feildinglawnmowerracing.org.nz
gisborneboardriders.com
greertonponyclub.com
hamiltoncanoepolo.org.nz
harboursidenetball.co.nz
harboursidenetball.nz
hbcfc.co.nz
hbcfc.org.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
healthyfamiliesinvercargill.org.nz
hockeysouthcanterbury.co.nz
hortpass.co.nz
hyc.org.nz
jcc.org.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlboroughparktennis.co.nz
melrosetargetshooting.co.nz
mesoball.co.nz
mesoball.com
mtrbmx.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharbourtag.co.nz
nzblackpowder.co.nz
nzblackpowder.com
nzpowerlifting.co.nz
nztua.com
otahuhuroversrugbyleague.co.nz
ponekerugby.com
ponsonbybowls.nz
prdf.co.nz
rbpc.nz
riverroad.co.nz
schoolground.com
schoolsportaoraki.co.nz
scrfu.co.nz
shoreroversnetball.co.nz
southernlakesmultisportclub.co.nz
southerntack.co.nz
sportsground.com
stewartalexander.co.nz
stheliersbowlingclub.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
timarucyclingclub.co.nz
touchnorthharbour.co.nz
tutangiora.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
whangareitri.co.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name northharbourtag.co.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
northcanterburyrugby.co.nz
www.nztua.com
hastings-central.school.nz
ultrarunner.org.nz
www.oacnz.org
sporty.co.nz
aafl.co.nz
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
aucklandmarist.co.nz
www.wmsc.org.nz
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
yes.stockx.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for northharbourtag.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi80niO8phQRZC6JOxvSa
S8HQ9YWXZx3yMH0p9S5CI8vZpuJw1a8MsGXkhADQ1DMFmTXurMfpPXSoRM74E81H
jPNdal5We1g8ULZSWBbQ/LlCNFM3wHcdvGLzhMUJ+gF7E6Hm562S20Izu+smZ69/
UFp9YMwLRclg3wTz9IxnJPPBUR9KpRIm6cCfNujV5PYqRmxNkCf2VCY2hJGUM5jA
f4cbUPE9oX/zYTE8eKukblUGMFCvR59YBF3BzyCjFp8jsIEpKR/azHMEr0woQjmw
r3LkoBtzlSMIyGUFH4FdyS9MwmEg/Ro1KUgl6O7e7qsTjoWV+8nWoOy3QPugFFXC
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270086235979504515415758511648414013846051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 01:13:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 01:13:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'northharbourtag.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17648289811780204404301603808806058814321949202820643698188558409991701168450249805131337066069610977370626536547764745613904974066728426820074711911923056483640623130050516061936036231308330315886049259410907463443021666748255992232028018100784283181147819981110569899402155170966172565008886961187224237441826849714181554400186026506601869158597672685056954491652428907107007119400454391630094315576272095190613095231257140255873744515255176229744226604814034146000088379030771959094349031499791997049051686907863891403812101332221135744722681373878734289404203242823996329652367033275554527434570236171046241026773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5598cd4550b880925e65ebc12a0e69dea0561ab3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1645 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czctc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harboursidenetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001665699f99b000004030046304402201edb4a9809c4d5252c2932c238c16d20e809d5c70fb6e8e2a98fa0e0207474de022038735a5e0256667b30b63e7f3e571f128eae1cd497e946a4ea673759fe3bf7e500770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001665699f9c30000040300483046022100b4feea607e0ec4483791f755126b758b64e6c3cee8928bd29a7ae5eee64a8dc8022100dd034870a61cd042925028eb931841453f371928d459da295419f69a399562a9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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