www.lincolnbowlingclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7f:40:43:3b:91:a8:e5:d8:8d:38:f8:f3:0b:15:2f:77:a5 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.lincolnbowlingclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7f:40:43:3b:91:a8:e5:d8:8d:38:f8:f3:0b:15:2f:77:a5
Serial Number (int): 304638138078062202777353047044648705423269
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:79:93:f3:ff:0e:dc:a0:60:07:7b:ce:7e:f4:3e:29:4d:17:ea:fa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b4:83:bc:a7:88:1a:6f:9e:eb:bf:64:a6:88:f5:71:18:00:c0:20:58
Fingerprint (sha256): 8c:33:43:bf:69:3c:0f:f4:6d:60:f1:d1:39:38:40:2d:1f:b4:64:0e:5b:ec:ee:15:ab:ed:66:f0:b1:4d:b0:b8

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.lincolnbowlingclub.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lincolnbowlingclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.diocesan.school.nz
bowlsnapier.co.nz
capephysio.co.nz
cjrs.co.nz
courtinthebay.co.nz
drysdale.kiwi
howicksoftball.co.nz
kaiapoinetball.co.nz
kirweenetball.co.nz
mahe.kiwi
mahedrysdale.kiwi
mcnetball.co.nz
ngaiwi.school.nz
olympicwrestlingnz.com
patumahoerugby.co.nz
prebbletonrugby.co.nz
sport.aotea.school.nz
starling.org.nz
taurangasports.co.nz
tearohafootball.com
tepukesports.co.nz
waitematarugby.co.nz
warkworthnetballclub.com
www.belfastrugby.co.nz
www.bopgolf.co.nz
www.bowlsnapier.co.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.capephysio.co.nz
www.cathcollege.school.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.cjrs.co.nz
www.courtinthebay.co.nz
www.darfieldrugby.co.nz
www.devonportsquash.org.nz
www.drysdale.kiwi
www.greenislandbadmintonclub.net.nz
www.greertonmaristnz.org.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbaysquash.co.nz
www.hbcricket.co.nz
www.hnhs.school.nz
www.howicksoftball.co.nz
www.hpnc.org.nz
www.huttaikido.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kapitigymsports.co.nz
www.kirweenetball.co.nz
www.lincolnbowlingclub.co.nz
www.mahe.kiwi
www.mahedrysdale.kiwi
www.mcnetball.co.nz
www.mpcricket.org.nz
www.mtbtauranga.co.nz
www.netballwaitakere.co.nz
www.ngaiwi.school.nz
www.northharbourwaterpolo.co.nz
www.northshorerugby.co.nz
www.nzpca.org
www.olympicwrestlingnz.com
www.otta.org.nz
www.papatoetoenorth.school.nz
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.ponekerugby.com
www.prebbletonrugby.co.nz
www.register4rugby.co.nz
www.sctrials.co.nz
www.silverdalerugby.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.sportslink.org.nz
www.squashauckland.org.nz
www.starling.org.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.taurangasports.co.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.waitematarugby.co.nz
www.warkworthnetballclub.com
www.zephyr.org.nz

Other certificates including the domain name lincolnbowlingclub.co.nz

(limited to 100 certificates)
www.hblp.co.nz
belmontparkbowlingclub.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
sporty.co.nz
www.sportslink.org.nz
squashauckland.org.nz
www.rugby-foundation.org.nz
sporty.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.hbcricket.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
trfu.co.nz

Certificate

The complete raw certificate details for www.lincolnbowlingclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Bat789Dc8xwHQ18PsdW
YLRnfXgahJraYNtegnaCzgl8p/LHEWmuNoW/rBDxvtzKaJ1P9irzJUbbpdEzcZ7N
ETHPtHTL9DZZGm5H0obwQ/KTofuoDiVaTHQxY1e6Bc2ipRfR24qwfvl9hlU9gCF2
Wr2poH63BKQ2OpQR+aNoAUMLlwsDXCPhWqo2LYug+d38K2G4mGqGR35j/QN6KbWt
ZOtlTNjV6HKkZQ0wROTKWf2od3I9T+rWXtvkzFA6pm8rpN17HnmwBJbKXdUI4Xr+
sudI2bNzQ/gDkm7uDZaH4Fnu/sQNtuvC2Vzty2MhJgd929nS6bjj2+1uB5+JbABq
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304638138078062202777353047044648705423269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 03:54:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 03:54:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29298470401033993828625440788607007538552104346477673332517367750546395046982629241424894008176211345653494226944225763737054403509550249405478217378610828711959882509250842739168278711190507678431012721454862419078601510498303812985415833553583344810841234988809399666777333435952001901967942120171358973694964091744088128673488539373398757472431603906484205939714055695338926043811424694278507540939616607735152755680839923196464494201567878917360215177926841533777926468784957977280336682778772619034097369249327081957654338363740263338568064173077864168237003873117326518618175920426769539003144083713741297838609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							277993f3ff0edca060077bce7ef43e294d17eafa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capephysio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.aotea.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capephysio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af7a42a9f0000040300483046022100c83f85a95b6bdb832df4505359b865c3119ff60c77d22892815462dd7a847ae202210085407ddaac911bbb8b482bdacb192ec1d648fd6cb85c3b0f420fb6ac47362e3b007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af7a42a71000004030046304402201eaa8f14ebd679792af53385c03e9ebf229a6957a5917defd18a669f300cb9e7022052c8213f291088c253fe518f3809f3eb864d0f7ee79d31ca0212d7ab233163b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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