sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:8d:23:7d:b9:b0:ce:82:06:47:32:c8:7b:42:ba:fe:d8:bb was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:23:7d:b9:b0:ce:82:06:47:32:c8:7b:42:ba:fe:d8:bb
Serial Number (int): 396476133246106943223933493086491194087611
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 27:a7:3c:b6:7b:57:64:8a:9e:4d:40:2c:4e:90:27:b8:05:d0:d3:cb
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:e0:82:d3:19:c9:22:47:77:2f:e5:da:00:d9:18:f4:84:40:d8:bd
Fingerprint (sha256): 8c:f5:b6:07:5a:19:53:67:2e:1a:cc:c3:ad:4c:7f:27:96:d8:36:e7:ef:ad:af:c5:22:8f:f4:17:02:99:ca:92

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arataki.school.nz
aucklandnetball.co.nz
beachlandsspeedway.co.nz
boprugby.co.nz
brucepulmanpark.com
cityrovers.co.nz
clevedongamefishingclub.co.nz
cliftonmarineclub.co.nz
csfc.co.nz
dunedintriclub.co.nz
frimley.school.nz
gateballnz.co.nz
glenedenunited.co.nz
glenfieldsoftballclub.co.nz
hibiscuscoast.basketball
huntlyinternationalspeedway.co.nz
iona.school.nz
kaiparabasketball.com
karatenz.co.nz
kartsportrotorua.nz
mknetball.co.nz
motuekanetball.co.nz
myrugby.co.nz
netballhuttvalley.co.nz
netballwellington.co.nz
nghs.school.nz
northcanterbury.basketball
northernunitedfootball.co.nz
northernunitedsports.co.nz
ohopefootball.org.nz
oldboys.co.nz
onemanaslsc.org.nz
otagocricket.co.nz
otagocricket.nz
otagosoftball.com
otagotouch.co.nz
papnorth.school.nz
poriruaindoorsports.co.nz
prebbletonvillagesquare.co.nz
rockynookbowls.nz
rotoruaspeedway.co.nz
runtimaru.co.nz
sportschaplaincy.co.nz
sporty.co.nz
squashwaikato.co.nz
tairuarsc.co.nz
teatatusoccer.org.nz
tetauihubaseball.nz
thelongroom.co.nz
workingequitationkaikoheboi.co.nz
wtrugby.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0koW+boW9ga7s3bnrlsX
1kunXG44cLH3TDl6R3swAPBB9Ns3DoHYEDAXUFLTaJbOTtOM9m4+GRtoQGzwYO0Q
zhyi51eCRLcu9FkULNa0SCNKyedaeOGlJTl4cZBajM89kXAUsnqy+Hd8KZBrYjlV
d5gFFJZ5OQzH+Wy8Kbfkvr8fexHMHWvWD+YPAyAFYnqmTYQ8cfFMvcd/Cygw0rzs
VxCTbha+Ay8YrFX35CBX1WjXO7vFJXpsaKf2Be7fZharRnPYsEcWdHkJr8JwXd6T
WGCKk3o3Bf5t5Y9AdD/Y1tvW+O0gbz8tReqFp8FVYNWVaDqLoH4YqjaCt6KXNIlN
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396476133246106943223933493086491194087611
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-09 20:20:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-07 20:20:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26546579059304755017748112196469120615893463927111737714580981521166916409497780252216532194986870992673662621417914195366906041739943013956680061117306543871631319268967000914994622564772509060510894451214551590949074311242140692040541112269556886433763575209384464292716520275540815306559305725943714755516069595962812202596967837191133577468743958363808157137135107658019745717723357696267081721529655899289483764030117750744762734398106857548911646230694657227895765752804016363521078412278786308480261091887559466750562833631450782559183615642396903738716335917752709539306704053897116100205910718157283853421929
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27a73cb67b57648a9e4d402c4e9027b805d0d3cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arataki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlandsspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boprugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucepulmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityrovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedongamefishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonmarineclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedintriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimley.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateballnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenedenunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibiscuscoast.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlyinternationalspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iona.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiparabasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatenz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportrotorua.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mknetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballhuttvalley.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohopefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemanaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagosoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papnorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poriruaindoorsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonvillagesquare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockynookbowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtimaru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportschaplaincy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuarsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatatusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetauihubaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelongroom.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingequitationkaikoheboi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtrugby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bb5f5369a0000040300463044022067a7cf5b076804f5b853c76bfdaf2855cbb1843c83cabe9345e3078537a2f525022004bef854953eff466602cff8098dc0aebf260e4c87b2e238e599b63189d80d10007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bb5f536a0000004030046304402204390fa742093a8589cd40d33180dce81fa5e9cdca2815fd896f13008a960552e02200e4bf599dc862c74a9c0bff8a1a6a47e35c46f3bbbbdd3e84ab1b11224f9a78c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001f23824ef32682b761fb81e8fba58a26894a85b4490756d8e639018d39a6bc60e9558fbaa96f2168a5119020a0eb58e0bb5186a9b4c6f3c36dffc5fca190e93ac4ded5d5cb2c53a9011f67516671ea8e1a5755aa365a71d64d8ae3fd70d3e1f5a2a5355894594cee6a59001a415ba328614df66445ae17ac3e4e672201bc01172a8badfcecfdac5c7513657ed681562aa5f15e5358074d1b60f5eeaeb440c7fc808374a8735e9f580dfd466e543a89b154bf57e782f8925a1ff7b9a0a2a317ee96f2c22e5f6bd9cc327a1109335f712f1b024d8ec6a81ca1f99051af1151d6a84d410d3a4be36a91c304fdd0007ec3dc6d83a0ec8c2f9bc67beeb4bcc92e337b