loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3c:ff:23:4e:77:1c:b1:e9:18:ba:f7:1d:57:2f:57:a5:fd was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3c:ff:23:4e:77:1c:b1:e9:18:ba:f7:1d:57:2f:57:a5:fd
Serial Number (int): 282092936271317231099172047649519596709373
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:24:dc:3d:14:96:03:ac:db:96:44:12:4a:84:e2:1d:b6:26:7c:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:d0:eb:1c:c3:bb:ec:54:90:bf:c0:2d:41:4a:e7:43:0e:f6:15:f7
Fingerprint (sha256): 8f:cd:36:67:29:0c:c3:69:da:a4:8c:62:e1:93:9b:9e:e2:af:ea:12:db:dd:0b:20:ca:fa:3a:d8:2a:ef:d8:11

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
beta.jucy.com
beta.jucy.com.loadbalancer.nix.jucy.co.nz
beta.jucy.com.web1.nix.jucy.co.nz
beta.jucy.com.web2.nix.jucy.co.nz
content.jucy.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucy.com.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
opperations.jucy.co.nz
opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz
opperations.jucy.co.nz.web1.nix.jucy.co.nz
opperations.jucy.co.nz.web2.nix.jucy.co.nz
staging.jucy.com
staging.jucy.com.loadbalancer.nix.jucy.co.nz
staging.jucy.com.web1.nix.jucy.co.nz
staging.jucy.com.web2.nix.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucy.com.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEa+l6TxNF7CRVCxoeom
/QF6MO4HQAYKvMkX/9Ad3Utcf7DHDtTkd9yKg33sDLYc2TICJLGcKCOfFV++IXYS
tvpn/O9xO4deSjycvkIDHmie/pSPeRpHur9jfPSv6o1SDiCQ+VIJ0/6ZO3+4O8xs
f+MDUm8BSW3102flNUdmszfknJ+IrPy3UIE2FpMAB3uocYF9/Rvdh2aOUCE0+fq6
PBBWrkdaTpySUFuI1C8jN0bDwC1G4s8pBO+GdeYtqpAg9CGrTo8DcFTnE9NnGM40
L5RcZdj6fnK4KQa5KZYKXTnLKJjFVDxMruLSHDyS5QXoS8M1O7c9B+ut0v6QSII8
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282092936271317231099172047649519596709373
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 21:50:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-14 21:50:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23767686747460717076751127534006926805620550594487599101840492828775240798341075159747860892036512538748084173552306274335350231922010259423732638711633949492212102695051724598160963606221026990928958876415501218448410351888814745905338059183339205090444497395550123924294077442291868985779696237702797979297742928144551688942369651774880307824434065842171393039947769628124039504406701458417715282104906854180854699213141353234232410812730617403552131769795329840124146142913947319790047548812285945798962659696986662035849637736087251735182881643604266701767256640575169397916858115682217610183908212572850642631709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e24dc3d149603acdb9644124a84e21db6267c29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2443 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170e58ab40b0000040300473045022100cdecc4b4e03c83f0e62c9874d7eaca41a1e0e5d9858cee29186aac52880342d30220690fed984098233f1cab932fcb934464dd12583a1b8f9696dc160355422b18d6007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170e58ab3fd000004030046304402205ae95959bbac0fb1abef4bc31295ba08e39b62cd554304fdcdbc6ce430cdf50e022016ad2fa32fdef3cad898843a98c1cc8b4e45316d53d246a280b95df36ea4e4ca
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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