trenthamrifleclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:be:1e:25:9c:82:dc:86:8b:79:94:ef:ed:5a:8c:9c:d2:06 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trenthamrifleclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:be:1e:25:9c:82:dc:86:8b:79:94:ef:ed:5a:8c:9c:d2:06
Serial Number (int): 326030579639540169916109447267377064235526
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 65:4f:f8:90:57:af:a5:ab:6c:fc:3c:1c:ef:ab:78:ce:07:c1:b9:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:10:5f:96:43:91:ce:83:2d:49:f5:32:fc:78:4e:2c:7c:95:4d:dc
Fingerprint (sha256): 85:61:bd:58:83:44:ff:c6:a3:a4:d6:e6:cf:07:a9:ae:80:7b:91:a7:48:80:f1:1a:ee:3c:0f:ef:80:c6:dc:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trenthamrifleclub.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trenthamrifleclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
aucklandmarist.co.nz
basketballtaranaki.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
boptouch.co.nz
bsgevents.co.nz
bullernetball.co.nz
canoeslalombop.co.nz
capitaldarts.co.nz
cornwallparktouch.nz
csa.org.nz
czctc.org.nz
farmpass.co.nz
feildinglawnmowerracing.org.nz
gisborneboardriders.com
greertonponyclub.com
hamiltoncanoepolo.org.nz
hastings-central.school.nz
hbcfc.co.nz
hbcfc.org.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
heet.net.nz
hockeysouthcanterbury.co.nz
hortpass.co.nz
jcc.org.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlboroughparktennis.co.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtwellingtonrugby.co.nz
nelsoncarclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharbourtag.co.nz
nzblackpowder.co.nz
nzblackpowder.com
nzpca.org
nzpowerlifting.co.nz
nztua.com
otagotouch.co.nz
otahuhuroversrugbyleague.co.nz
pioneerbasketballclub.co.nz
ponekerugby.com
ponsonbybowls.nz
prebbletonnetball.org.nz
puhoisports.org.nz
rbpc.nz
riverroad.co.nz
schoolground.com
scrfu.co.nz
shoreroversnetball.co.nz
southernlakesmultisportclub.co.nz
southerntack.co.nz
southlandolympicweightlifting.co.nz
sportsground.com
stewartalexander.co.nz
stheliersbowlingclub.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
timarucyclingclub.co.nz
touchnorthharbour.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
tutangiora.nz
ultrarunner.org.nz
volleyballbop.co.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
wellsfordsquashclub.co.nz
whangareitri.co.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name trenthamrifleclub.co.nz

(limited to 100 certificates)
willowpark.school.nz
sporty.co.nz
sporty.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
southlandmtbclub.co.nz
www.opotikicol.school.nz
www.oacnz.org
sporty.co.nz
distanceridingnewzealand.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.wmsc.org.nz
uniss.co.nz
rosmini.school.nz
www.badmintonhb.co.nz
canterburybaseball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for trenthamrifleclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkp55dUfcFEKsarzegNwy
YtoPAzXUIsjsgGeIoGnsVJxxOhENW8k37KplUi/yCFJq8R+PELMjLWDyXd0r3WwI
52PZyHpDXi642fnrJACba1GbZmFIrsCLVwLrD//HsTqXK7kqHEmc5AFuZTUsfAjv
KASC79guZPRrrZkIE3i7EP+fDyS/wZ/M20FCPbNnv1eKnG8PZV954Dfo5aPHCYKT
M4yVbeWgyKmCvGuXSKDHOIDuzCNraabxWBP6XzRuZTuslCGvwoNmG48mSQ/ITxAg
Ax4wqZxRjDl7YPNyuq2GLGMOMbMTbc9NhuRAcd5uo2IXcav+pgygcYdpZxHaMuPx
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326030579639540169916109447267377064235526
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-29 04:22:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-29 04:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trenthamrifleclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18508939186840176683801603520779771855315623657793363187256087759709819968582541959455029480843142410468189511262944970067693033762543080005117220101534356310109390316997321394854937069235614240319222231760541536667996418251705855781310327694064839922371154647725393756622135202709975780538537898235334086600917278481054741594128304152287934049229775908035125186544406684300511802775953980180720207276687142730331327578383905352978878209844144951179052930592894125987683876873365659378511469630534038706907769230587650251155992953486938597841587735819489521975206438987201055171906086311699488503033164480965528252869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							654ff89057afa5ab6cfc3c1cefab78ce07c1b936
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czctc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168980f189c0000040300483046022100d8a4300c781d78fde73c1781f9f4d66fe5ef6c74b9c2050bd0ac4c8b5a5e415c022100c98def598559f60303a77b87c973d18574811295671c588824398be75f66e112007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000168980f189e0000040300473045022100ed6cbaded87da537e10dc4fdc2d91526a6d6abb0bb45179aa0e56256d96ab76a02206867861cd13f62e7c738b06980659da5504308165fc9573f5303b538c42e71e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00081b57a97f31d8ebbdc77aed03f3913a3ca179d78c14f7131019ab3257a97a416aa02823217436b0b3c903334ab899687373f26debfd69d796426c1d28faf6f2becc4c54015ada1cbe38c76b686972a130c26c9084eb0475f44642dfd62f6f49abb03a6dbf85e9a9d9d8f413eff00e2e8cd8d7cfcb93c6f9a52801e5dba24b83bdb9f6df0a5552ae88bba06426adc2797079c4018d4f3ac46bce4f023fe3fde509d78c403d85689bd219247f243a23b69adb0a714d304b91c495216c49c431bf5f639fbb8fad2e915badb55b2e1fbb81c1db415e0aa03f3cd200c4f3664b18930116e4fb6ca799e391827c3430a522d93efc82872edb934803f3240d606d328d