kiwischools.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:60:18:de:04:9a:8b:99:58:ee:af:b7:93:64:cc:b2:86:98 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=kiwischools.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:60:18:de:04:9a:8b:99:58:ee:af:b7:93:64:cc:b2:86:98
Serial Number (int): 294037019274866244388829080981700965729944
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:3b:ec:23:c1:a1:e3:bd:27:cc:e6:fa:28:1f:4e:a6:38:c6:ef:a0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 97:d6:bc:c9:3e:62:0f:d6:59:00:c6:d1:b7:51:c4:64:75:83:c8:60
Fingerprint (sha256): 8f:75:0d:ee:0c:1d:63:fd:c0:12:32:62:a1:ae:03:a1:7f:cf:68:f1:1d:64:c3:cf:37:e5:67:07:6d:3e:39:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate kiwischools.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiwischools.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

default.kiwischools.com
getappandgo.kiwischools.com
kiwischools.co.nz
kiwischools.com
kiwischools.kiwischools.com
mail.default.kiwischools.com
mail.getappandgo.co
mail.getappandgo.kiwischools.com
mail.kiwischools.com
mail.kiwischools.kiwischools.com
mail.marcellinplaceholder.kiwischools.com
mail.mossburn.kiwischools.com
mail.ngaere.kiwischools.com
mail.nspa.kiwischools.com
mail.om.kiwischools.com
mail.royaloakint.kiwischools.com
mail.stjosephsdvke.kiwischools.com
mail.tahakopa.kiwischools.com
mail.tokoroacentral.kiwischools.com
mail.whangareiheads.kiwischools.com
mail.whangareiheads.school.nz
mail.wilson.kiwischools.com
marcellin.school.nz
marcellinplaceholder.kiwischools.com
mossburn.kiwischools.com
mossburn.school.nz
ngaere.kiwischools.com
ngaere.school.nz
nspa.kiwischools.com
nspa.org.nz
om.kiwischools.com
owenmcleod.co.nz
royaloakint.kiwischools.com
royaloakint.school.nz
stjosephsdvke.kiwischools.com
stjosephsdvke.school.nz
tahakopa.kiwischools.com
tahakopa.school.nz
tokoroacentral.kiwischools.com
tokoroacentral.school.nz
whangareiheads.kiwischools.com
whangareiheads.school.nz
wilson.kiwischools.com
wilson.school.nz
www.default.kiwischools.com
www.getappandgo.co
www.getappandgo.kiwischools.com
www.kiwischools.co.nz
www.kiwischools.com
www.kiwischools.kiwischools.com
www.marcellin.school.nz
www.marcellinplaceholder.kiwischools.com
www.mossburn.kiwischools.com
www.mossburn.school.nz
www.ngaere.kiwischools.com
www.ngaere.school.nz
www.nspa.kiwischools.com
www.nspa.org.nz
www.om.kiwischools.com
www.owenmcleod.co.nz
www.royaloakint.kiwischools.com
www.royaloakint.school.nz
www.stjosephsdvke.kiwischools.com
www.stjosephsdvke.school.nz
www.tahakopa.kiwischools.com
www.tahakopa.school.nz
www.tokoroacentral.kiwischools.com
www.tokoroacentral.school.nz
www.whangareiheads.kiwischools.com
www.whangareiheads.school.nz
www.wilson.kiwischools.com
www.wilson.school.nz

Other certificates including the domain name kiwischools.com

(limited to 100 certificates)
*.kiwischools.com
kiwischools5.kiwischools.com
kiwischools.com
otahuhu.kiwischools.com
boulcott.kiwischools.com
greenhithe.school.nz
kevins.kiwischools.com
tamaki.kiwischools.com
tekuraowaikare.school.nz
kiwischools.com
kiwischools.com
boulcott.kiwischools.com
sunnyvale.kiwischools.com
dannevirkesouth.kiwischools.com
kiwischools.com
maristhb.kiwischools.com
kiwischools.com
raivalley.kiwischools.com
otahuhuint.kiwischools.com
wrm.kiwischools.com
kiwischools.com
kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
kiwischools.com
kiwischools.com
otahuhuint.kiwischools.com
kiwischools.com
kiwischools3.kiwischools.com
peps.school.nz
matangi.kiwischools.com
balfour.kiwischools.com
pakurangaheights.kiwischools.com
ridgeview.kiwischools.com
leabank.kiwischools.com
jireh.school.nz
awahou.kiwischools.com
tokanui.kiwischools.com
demo.kiwischools.com
jireh.school.nz
kiwischools.com
*.kiwischools.com
balfour.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kiwischools.com
*.kiwischools.com
kiwischools.com
kiwischools.co.nz
kiwischools.com
tikokino.kiwischools.com
kiwischools.com
kiwischools.com
peps.kiwischools.com
manurewasouth.school.nz
kiwischools.com
*.kiwischools.com
dairyflat.kiwischools.com
tokanui.school.nz
greytown1.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
birkdalenorth.kiwischools.com
balfour.kiwischools.com
kiwischools.com
kiwischools.com
kiwischools.com
manurewawest.kiwischools.com
stanhope.kiwischools.com
greenhithe.kiwischools.com
kiwischools.co.nz
*.kiwischools.com
kiwischools.com
whenuapai1.kiwischools.com
ridgeview.school.nz
ruahine.kiwischools.com
kiwischools.com
manurewasouth.kiwischools.com
kiwischools.co.nz
ngakonui.kiwischools.com
kiwischools.com
matangi2.kiwischools.com
birkdalenorth.kiwischools.com
kiwischools.com
kiwischools.co.nz
tekuraowaikare.kiwischools.com
whitikahu.kiwischools.com
kiwischools.com
peps.kiwischools.com
whenuapai1.kiwischools.com
kevins.kiwischools.com
kiwischools.com
kevins.kiwischools.com

Certificate

The complete raw certificate details for kiwischools.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM9jCCC96gAwIBAgISA2AY3gSai5lY7q+3k2TMsoaYMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAyMjUwMTEzMThaFw0x
OTA1MjYwMTEzMThaMBoxGDAWBgNVBAMTD2tpd2lzY2hvb2xzLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMamscxdYEaf2pDw1SVXKNYtqpJ0OJLF
/FLRn6HCeK4LnUG0UYKlmfIOv0D9n2lHR0YpRFT6/Enb4LcL3rvTe3CUUpjfNO84
ClxRgLYSJeYppb4WMJiYf5nP34g/V4A83xIYdF2BvZGIEnAZ2k3Rxb4EVFBbxw0E
jW3umN9bjcvnCG/QCefzLuTbRzPjqh8ubHSMId5+zP65OJGWWLxhnFRmVaB6L7GR
n6dtJ4YVST3dETohUSQLv3bPvDtQQexUOW69c2hxsAYJYsGuAXeY91P3cWLGp+nu
ia/EJdW926wLQfK+xceeIC5lOoAXaQyhQT7c1bj27uf1xllEMXItE0kCAwEAAaOC
CgQwggoAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUITvsI8Gh470nzOb6KB9OpjjG
76AwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCB7YGA1UdEQSCB60wggepghdkZWZhdWx0Lmtpd2lzY2hvb2xzLmNvbYIb
Z2V0YXBwYW5kZ28ua2l3aXNjaG9vbHMuY29tghFraXdpc2Nob29scy5jby5ueoIP
a2l3aXNjaG9vbHMuY29tghtraXdpc2Nob29scy5raXdpc2Nob29scy5jb22CHG1h
aWwuZGVmYXVsdC5raXdpc2Nob29scy5jb22CE21haWwuZ2V0YXBwYW5kZ28uY2+C
IG1haWwuZ2V0YXBwYW5kZ28ua2l3aXNjaG9vbHMuY29tghRtYWlsLmtpd2lzY2hv
b2xzLmNvbYIgbWFpbC5raXdpc2Nob29scy5raXdpc2Nob29scy5jb22CKW1haWwu
bWFyY2VsbGlucGxhY2Vob2xkZXIua2l3aXNjaG9vbHMuY29tgh1tYWlsLm1vc3Ni
dXJuLmtpd2lzY2hvb2xzLmNvbYIbbWFpbC5uZ2FlcmUua2l3aXNjaG9vbHMuY29t
ghltYWlsLm5zcGEua2l3aXNjaG9vbHMuY29tghdtYWlsLm9tLmtpd2lzY2hvb2xz
LmNvbYIgbWFpbC5yb3lhbG9ha2ludC5raXdpc2Nob29scy5jb22CIm1haWwuc3Rq
b3NlcGhzZHZrZS5raXdpc2Nob29scy5jb22CHW1haWwudGFoYWtvcGEua2l3aXNj
aG9vbHMuY29tgiNtYWlsLnRva29yb2FjZW50cmFsLmtpd2lzY2hvb2xzLmNvbYIj
bWFpbC53aGFuZ2FyZWloZWFkcy5raXdpc2Nob29scy5jb22CHW1haWwud2hhbmdh
cmVpaGVhZHMuc2Nob29sLm56ghttYWlsLndpbHNvbi5raXdpc2Nob29scy5jb22C
E21hcmNlbGxpbi5zY2hvb2wubnqCJG1hcmNlbGxpbnBsYWNlaG9sZGVyLmtpd2lz
Y2hvb2xzLmNvbYIYbW9zc2J1cm4ua2l3aXNjaG9vbHMuY29tghJtb3NzYnVybi5z
Y2hvb2wubnqCFm5nYWVyZS5raXdpc2Nob29scy5jb22CEG5nYWVyZS5zY2hvb2wu
bnqCFG5zcGEua2l3aXNjaG9vbHMuY29tggtuc3BhLm9yZy5ueoISb20ua2l3aXNj
aG9vbHMuY29tghBvd2VubWNsZW9kLmNvLm56ghtyb3lhbG9ha2ludC5raXdpc2No
b29scy5jb22CFXJveWFsb2FraW50LnNjaG9vbC5ueoIdc3Rqb3NlcGhzZHZrZS5r
aXdpc2Nob29scy5jb22CF3N0am9zZXBoc2R2a2Uuc2Nob29sLm56ghh0YWhha29w
YS5raXdpc2Nob29scy5jb22CEnRhaGFrb3BhLnNjaG9vbC5ueoIedG9rb3JvYWNl
bnRyYWwua2l3aXNjaG9vbHMuY29tghh0b2tvcm9hY2VudHJhbC5zY2hvb2wubnqC
HndoYW5nYXJlaWhlYWRzLmtpd2lzY2hvb2xzLmNvbYIYd2hhbmdhcmVpaGVhZHMu
c2Nob29sLm56ghZ3aWxzb24ua2l3aXNjaG9vbHMuY29tghB3aWxzb24uc2Nob29s
Lm56ght3d3cuZGVmYXVsdC5raXdpc2Nob29scy5jb22CEnd3dy5nZXRhcHBhbmRn
by5jb4Ifd3d3LmdldGFwcGFuZGdvLmtpd2lzY2hvb2xzLmNvbYIVd3d3Lmtpd2lz
Y2hvb2xzLmNvLm56ghN3d3cua2l3aXNjaG9vbHMuY29tgh93d3cua2l3aXNjaG9v
bHMua2l3aXNjaG9vbHMuY29tghd3d3cubWFyY2VsbGluLnNjaG9vbC5ueoIod3d3
Lm1hcmNlbGxpbnBsYWNlaG9sZGVyLmtpd2lzY2hvb2xzLmNvbYIcd3d3Lm1vc3Ni
dXJuLmtpd2lzY2hvb2xzLmNvbYIWd3d3Lm1vc3NidXJuLnNjaG9vbC5ueoIad3d3
Lm5nYWVyZS5raXdpc2Nob29scy5jb22CFHd3dy5uZ2FlcmUuc2Nob29sLm56ghh3
d3cubnNwYS5raXdpc2Nob29scy5jb22CD3d3dy5uc3BhLm9yZy5ueoIWd3d3Lm9t
Lmtpd2lzY2hvb2xzLmNvbYIUd3d3Lm93ZW5tY2xlb2QuY28ubnqCH3d3dy5yb3lh
bG9ha2ludC5raXdpc2Nob29scy5jb22CGXd3dy5yb3lhbG9ha2ludC5zY2hvb2wu
bnqCIXd3dy5zdGpvc2VwaHNkdmtlLmtpd2lzY2hvb2xzLmNvbYIbd3d3LnN0am9z
ZXBoc2R2a2Uuc2Nob29sLm56ghx3d3cudGFoYWtvcGEua2l3aXNjaG9vbHMuY29t
ghZ3d3cudGFoYWtvcGEuc2Nob29sLm56giJ3d3cudG9rb3JvYWNlbnRyYWwua2l3
aXNjaG9vbHMuY29tghx3d3cudG9rb3JvYWNlbnRyYWwuc2Nob29sLm56giJ3d3cu
d2hhbmdhcmVpaGVhZHMua2l3aXNjaG9vbHMuY29tghx3d3cud2hhbmdhcmVpaGVh
ZHMuc2Nob29sLm56ghp3d3cud2lsc29uLmtpd2lzY2hvb2xzLmNvbYIUd3d3Lndp
bHNvbi5zY2hvb2wubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEG
BgorBgEEAdZ5AgQCBIH3BIH0APIAdwDiaUuuJujpQAnohhu2O4PUPuf+dIj7pI8o
kwGd3fHb/gAAAWkibYq5AAAEAwBIMEYCIQDeRYINTEIROcZr2VvX8FDOCWkM5yel
A02N8i1t9R2UqwIhAPqHK23NItFsyzvL9qYeztsvZ1xKq2z4DrjOhfOvfadUAHcA
KTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFpIm2MrgAABAMASDBG
AiEA+f+u/qbEymMhkjQd48kZZBh0JuDAF5ELKuS2rQCbFLECIQDbUe8lsL6FJuwA
srMGPJE/aafg228zNE0VxIM/Q94F6DANBgkqhkiG9w0BAQsFAAOCAQEAN+ILoPoV
e6k3+LXUYAKyYdXPo/6ITeSTbC/ToqG1bx/v3h5stsmFNqam5wQrQJJ6ATH7YK0m
NBcqaOrXvnqaOCeV/+3J8n+pLt0+XbRpT8dH6AGdZPrNvLQipXTc0+cA//aQUgRS
U15Muz/k+dfuBhaGmhVCujPBWF+4ih4sLkBgA1vnAWQsaGeOoIm7mjxpwsbOlkg6
ZMzORFAl6autBf0Vjys4z4GHaEcaBXHAj/QeZ7Lkwa+jXCjoFs7YHrWCqrlkcYOx
F8iRQd2cl7Y47zAKKhGIQO4RWMjvZIzdhe06MbbjEABuydHLbeY/RdooLVsCS+3e
75hmRBC4yEXgEQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqaxzF1gRp/akPDVJVco
1i2qknQ4ksX8UtGfocJ4rgudQbRRgqWZ8g6/QP2faUdHRilEVPr8Sdvgtwveu9N7
cJRSmN807zgKXFGAthIl5imlvhYwmJh/mc/fiD9XgDzfEhh0XYG9kYgScBnaTdHF
vgRUUFvHDQSNbe6Y31uNy+cIb9AJ5/Mu5NtHM+OqHy5sdIwh3n7M/rk4kZZYvGGc
VGZVoHovsZGfp20nhhVJPd0ROiFRJAu/ds+8O1BB7FQ5br1zaHGwBgliwa4Bd5j3
U/dxYsan6e6Jr8Ql1b3brAtB8r7Fx54gLmU6gBdpDKFBPtzVuPbu5/XGWUQxci0T
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294037019274866244388829080981700965729944
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 01:13:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-26 01:13:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiwischools.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25077384517005055323672434260654242209093258686543420907177694958327543921390472294789304135298831994850791584007886098686164458120803679056881696656572404849934207901063651912768505926340576752515380500072575921955347113382154744588478575863825699102715361221411191072414765255318640489710446773738531458154909531868181972262206481748424290711231178452472485991510543149239362979086397696433829375699912367259556651024673538667039604935958774678817327868932183737084384944941286079170636419569251121536457225743715123240796799353995402690750925798690192768008857517384593610826428404596663333017253247973703365235529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							213bec23c1a1e3bd27cce6fa281f4ea638c6efa0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1965 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getappandgo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.mossburn.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ngaere.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.om.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tahakopa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whangareiheads.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellin.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaere.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nspa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'om.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owenmcleod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahakopa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tahakopa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokoroacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareiheads.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wilson.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.default.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getappandgo.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.getappandgo.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwischools.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcellin.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marcellinplaceholder.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaere.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nspa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nspa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.om.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.owenmcleod.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakint.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephsdvke.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahakopa.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahakopa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokoroacentral.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tokoroacentral.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareiheads.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareiheads.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson.kiwischools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wilson.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169226d8ab90000040300483046022100de45820d4c421139c66bd95bd7f050ce09690ce727a5034d8df22d6df51d94ab022100fa872b6dcd22d16ccb3bcbf6a61ecedb2f675c4aab6cf80eb8ce85f3af7da754007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169226d8cae0000040300483046022100f9ffaefea6c4ca632192341de3c91964187426e0c017910b2ae4b6ad009b14b1022100db51ef25b0be8526ec00b2b3063c913f69a7e0db6f33344d15c4833f43de05e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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