taitoko.skoolsites.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:30:83:55:8f:0a:8e:5c:07:e1:50:2e:4c:10:bf:38:c9:e3 was issued on by Let's Encrypt.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=taitoko.skoolsites.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:30:83:55:8f:0a:8e:5c:07:e1:50:2e:4c:10:bf:38:c9:e3
Serial Number (int): 277844984521387498702926913463121874569699
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ff:a2:b4:2c:11:4b:ea:6f:66:6d:e0:5e:2d:05:74:2f:f7:ef:0a:01
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5b:89:13:98:f4:c6:5a:43:a4:58:19:55:70:8f:ea:22:81:f4:6a:19
Fingerprint (sha256): 89:4c:49:04:d6:f1:57:03:48:31:36:d9:dd:14:29:75:53:bd:87:51:de:3c:32:61:79:3d:14:97:b4:42:2e:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate taitoko.skoolsites.co.nz

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for taitoko.skoolsites.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

allenton.school.skoolsites.co.nz
allentonschool.skoolsites.co.nz
bigrock.school.nz
cobdenprimary.skoolsites.co.nz
cpanel.skoolsites.co.nz
duntroon.school.nz
duvauchelle.school.nz
faircol.skoolsites.co.nz
flanshawroadschool.skoolsites.co.nz
hiwinuischool.skoolsites.co.nz
huntlycollege.school.nz
maromaku.school.nz
mayfieldschool.skoolsites.co.nz
mtbiggs.skoolsites.co.nz
northlandcollege.skoolsites.co.nz
nsc.school.nz
opotikicol.school.nz
otocoll.school.nz
paeroacentralschool.skoolsites.co.nz
papakuraprincipalsassociation.skoolsites.co.nz
parkvale.school.nz
picton.school.skoolsites.co.nz
practiceschool.skoolsites.co.nz
rangi.school.nz
saintmarks.skoolsites.co.nz
skoolsites.co.nz
solwayprimary.skoolsites.co.nz
spotswoodcollege.skoolsites.co.nz
stjohnsgirls.school.nz
stjosephsdvke.school.nz
stleoscatholicschool.skoolsites.co.nz
taitacentral.skoolsites.co.nz
taitoko.skoolsites.co.nz
te-kura-kaupapa-maori-a-rohe-o-mangere.skoolsites.co.nz
tehaukaretu.school.nz
templatetwo.skoolsites.co.nz
tikorangischool.skoolsites.co.nz
tisburyschool.skoolsites.co.nz
tokomaru.school.nz
tongariroschool.skoolsites.co.nz
totara.skoolsites.co.nz
waikaretuschool.skoolsites.co.nz
waiotahevalley.skoolsites.co.nz
waitakereprimary.school.nz
waitoki.skoolsites.co.nz
walton.school.nz
ward.school.nz
waverlypark.school.skoolsites.co.nz
westendnp.school.nz
www.allenton.school.skoolsites.co.nz
www.allentonschool.skoolsites.co.nz
www.bigrock.school.nz
www.cobdenprimary.skoolsites.co.nz
www.duntroon.school.nz
www.duvauchelle.school.nz
www.faircol.skoolsites.co.nz
www.flanshawroadschool.skoolsites.co.nz
www.hiwinuischool.skoolsites.co.nz
www.huntlycollege.school.nz
www.maromaku.school.nz
www.mayfieldschool.skoolsites.co.nz
www.mtbiggs.skoolsites.co.nz
www.northlandcollege.skoolsites.co.nz
www.nsc.school.nz
www.opotikicol.school.nz
www.otocoll.school.nz
www.paeroacentralschool.skoolsites.co.nz
www.papakuraprincipalsassociation.skoolsites.co.nz
www.parkvale.school.nz
www.picton.school.skoolsites.co.nz
www.practiceschool.skoolsites.co.nz
www.rangi.school.nz
www.saintmarks.skoolsites.co.nz
www.skoolsites.co.nz
www.solwayprimary.skoolsites.co.nz
www.spotswoodcollege.skoolsites.co.nz
www.stjohnsgirls.school.nz
www.stjosephsdvke.school.nz
www.stleoscatholicschool.skoolsites.co.nz
www.taitacentral.skoolsites.co.nz
www.taitoko.skoolsites.co.nz
www.te-kura-kaupapa-maori-a-rohe-o-mangere.skoolsites.co.nz
www.tehaukaretu.school.nz
www.templatetwo.skoolsites.co.nz
www.tikorangischool.skoolsites.co.nz
www.tisburyschool.skoolsites.co.nz
www.tokomaru.school.nz
www.tongariroschool.skoolsites.co.nz
www.totara.skoolsites.co.nz
www.waikaretuschool.skoolsites.co.nz
www.waiotahevalley.skoolsites.co.nz
www.waitakereprimary.school.nz
www.waitoki.skoolsites.co.nz
www.walton.school.nz
www.ward.school.nz
www.waverlypark.school.skoolsites.co.nz
www.westendnp.school.nz

Other certificates including the domain name skoolsites.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for taitoko.skoolsites.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq6JUQ0cxrOOv18oLytB
DDzDTf1hYuPhg/C6Mf7d0eZ7ZWDHQCjM0+FWHKV16FQdvAd+dKKqphsGgPlneF66
NGIxELvYd/Dplu/tI/SfVhU0o/HuXs7D7MIyvqiJBHQCqgPAlZtGjvzXFVvhyFWI
L4PP9V/Ju8JFcq2onuHJCxtwsLyVtGqQTF0/iAu5mrrtnCEn/B3fCe4tRIKmbjbQ
25xCpRwg45xYTpSBf67g4l5dmVGtN4xIOkssbYLMI80Hy0ZOJB7Ny17QEixU/IH2
DXCBsZdZ7eMU9EDpe+X++M+cUQzPq09hMrjzIIfac6CmqY3adiE/HfqRg6LkTEFm
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277844984521387498702926913463121874569699
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-24 00:10:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-23 00:10:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'taitoko.skoolsites.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22051532167244145904620674230454304275515879115833777401604908390995891814650984446482089982246824149146495224764225801114526105235258309713446992498724717659095985808193838049321903580862107941970806464064733549358801834045888229880812477120380944447006439291499498691507359523124449969340399859043870197548921695774832252529671649466901662536214231276429831518325039568297925960504021150855774415411168793126252692061086089015838303393969759140430772224253784563920131078579869562072957498410942559787714512668231354234080586981729138279401449023784937469647787585672387547408608163178351230612671629749378326030053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffa2b42c114bea6f666de05e2d05742ff7ef0a01
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2953 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cobdenprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flanshawroadschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mayfieldschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paeroacentralschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuraprincipalsassociation.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'picton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spotswoodcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stleoscatholicschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitacentral.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taitoko.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'te-kura-kaupapa-maori-a-rohe-o-mangere.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tikorangischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tisburyschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tongariroschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaretuschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westendnp.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allenton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.allentonschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bigrock.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cobdenprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duntroon.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.duvauchelle.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faircol.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flanshawroadschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hiwinuischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huntlycollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maromaku.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mayfieldschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbiggs.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northlandcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otocoll.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paeroacentralschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuraprincipalsassociation.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.picton.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.practiceschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintmarks.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solwayprimary.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spotswoodcollege.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjohnsgirls.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stleoscatholicschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitacentral.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taitoko.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.te-kura-kaupapa-maori-a-rohe-o-mangere.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tehaukaretu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.templatetwo.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tikorangischool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tisburyschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokomaru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tongariroschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totara.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaretuschool.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiotahevalley.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakereprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitoki.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.walton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ward.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waverlypark.school.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westendnp.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f0da75b6300000403004730450220704fa3eac01802d398cbf56b3f56f4b99ed8a5537a9a685b1a1a276efd2aa11e02210086a633d4e3400bf1dbd8c494a9a9a4a2c67e9b7c1e15516f54c128cf92c9ce7d0076001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018f0da75b7400000403004730450220496e83ca1a9f29ca0901e7883896d3254dddbcdc17fce3ebfbac13286157c340022100afb7c7f5ff41fa8fe7123a2898a02a9424ffbaaa9e5ea50af8b9f3a2277e8810
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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