www.pukekohesoftball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:a4:6a:af:7b:49:e9:0c:1c:6e:0b:47:ac:63:a5:39:5e was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pukekohesoftball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:a4:6a:af:7b:49:e9:0c:1c:6e:0b:47:ac:63:a5:39:5e
Serial Number (int): 289458559216763043609675867159763607697758
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9b:9b:e0:39:43:bc:08:2f:15:82:40:cf:98:1b:41:3b:ae:d3:46:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 06:59:9f:01:2e:46:ad:45:26:2f:fe:2f:9d:6c:47:4b:f1:55:9c:ea
Fingerprint (sha256): 90:9a:5c:0a:5c:f3:c8:c7:8a:fc:02:35:8a:bd:7b:f2:be:71:25:e7:6a:39:ca:d7:16:8f:7e:29:67:c0:ee:4a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pukekohesoftball.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pukekohesoftball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.qmc.school.nz
sport.rosmini.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.badminton.org.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.blokarthb.co.nz
www.bluerovers.co.nz
www.bowlsbop.co.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.nz
www.christchurchmetrocricket.org
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.collegesportsportal.co.nz
www.crossrecreationcentre.co.nz
www.darfieldcricket.co.nz
www.fastpitch.co.nz
www.frasertechcricket.nz
www.gksports.co.nz
www.goodmanrural.co.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.hockeywairarapa.org.nz
www.howicknetball.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kerikerimtbclub.co.nz
www.maristalbion.co.nz
www.maristinvercargill.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.morningtonbowlingclub.co.nz
www.mtsquashclub.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sailhbc.org.nz
www.sasfootball.club
www.sasfootball.org.nz
www.sharkssports.co.nz
www.speedway.co.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sportynews.co.nz
www.sumnerbowls.co.nz
www.sydenhamrugby.co.nz
www.tasmanvolley.org.nz
www.ths.school.nz
www.trfu.co.nz
www.unimountafc.org.nz
www.wahinetoamcc.nz
www.waterpolo.org.nz
www.westlandmotorcycleclub.co.nz
www.whangareibridgeclub.co.nz
www.worldpowerlifting.nz
www.wsra.nz

Other certificates including the domain name pukekohesoftball.co.nz

(limited to 100 certificates)
www.sportsground.com
amdg.org.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
sporty.co.nz
squashauckland.org.nz
sporty.co.nz
www.sportsground.com
www.akaranacityrifleclub.co.nz
sporty.co.nz
www.cyclingsc.co.nz
www.marlboroughtrampingclub.co.nz
sporty.co.nz
sporty.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
amdg.org.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.marlinsnetball.co.nz
sporty.co.nz
sporty.co.nz
trfu.co.nz

Certificate

The complete raw certificate details for www.pukekohesoftball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOJjCCDQ6gAwIBAgISA1Kkaq97SekMHG4LR6xjpTleMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODExMjcwNDQyMzFaFw0x
OTAyMjUwNDQyMzFaMCUxIzAhBgNVBAMTGnd3dy5wdWtla29oZXNvZnRiYWxsLmNv
Lm56MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXHfWmek0nFwopne
uZdQQO27uyRFQljfqxehHnWopZ2a/z4pgyZXHnLwEJbQHZIWJvzq81aNFA1jASLQ
UNgb98Q57JpidIQYWDM+b2m4AXngO1TBa4bj6eAXyqdfsU2dxjoxTrBDZUvN15mf
MnRuZ2JtLCSV8UqP5sb1VU1q0HGC8izMJ4e0M1MjLATeuRKY0sehHEG5LPQfVu3i
WLoS5ugaNlLeOpjvwBS/dmC9mcmRRt4XSK4wEArvF7LmVFaOLLNsiubUAZ6ttICP
TIg7W2cPXZYX/UzuCwLXXoR3CDcpFjgTGTpVTMikIpmnG8tQ0sk8zSQiLlFGU5H/
IKKJTQIDAQABo4ILKTCCCyUwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSbm+A5Q7wI
LxWCQM+YG0E7rtNG9zAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBv
BggrBgEFBQcBAQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5s
ZXRzZW5jcnlwdC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5s
ZXRzZW5jcnlwdC5vcmcvMIII3gYDVR0RBIII1TCCCNGCF211c2ljLnJvc21pbmku
c2Nob29sLm56ghNzcG9ydC5xbWMuc2Nob29sLm56ghdzcG9ydC5yb3NtaW5pLnNj
aG9vbC5ueoIed3d3LmFrYXJhbmFjaXR5cmlmbGVjbHViLmNvLm56gg93d3cuYW1k
Zy5vcmcubnqCGHd3dy5hb3Jha2ktZHJhZ29ucy5jby5ueoIPd3d3LmFycmEub3Jn
Lm56ghl3d3cuYXdhdGVyZWdvbGZjbHViLmNvLm56ghR3d3cuYmFkbWludG9uLm9y
Zy5ueoIjd3d3LmJheW9maXNsYW5kc2RyZXNzYWdlZ3JvdXAuY28ubnqCF3d3dy5i
YXlzYXRobGV0aWNzLmNvLm56ghN3d3cuYmxva2FydGhiLmNvLm56ghR3d3cuYmx1
ZXJvdmVycy5jby5ueoISd3d3LmJvd2xzYm9wLmNvLm56ghp3d3cuY2FudGVyYnVy
eXVuaXRlZC5jby5ueoIZd3d3LmNhcGl0YWxiYXNlYmFsbC5jby5ueoIid3d3LmNo
cmlzdGNodXJjaG1ldHJvY3JpY2tldC5jby5ueoIgd3d3LmNocmlzdGNodXJjaG1l
dHJvY3JpY2tldC5jb22CH3d3dy5jaHJpc3RjaHVyY2htZXRyb2NyaWNrZXQubnqC
IHd3dy5jaHJpc3RjaHVyY2htZXRyb2NyaWNrZXQub3JngiN3d3cuY2hyaXN0Y2h1
cmNobWV0cm9jcmlja2V0Lm9yZy5ueoIVd3d3LmNsaWZ0b25jcmlja2V0Lm56ghx3
d3cuY2xpZnRvbmNyaWNrZXRjbHViLmNvLm56ghZ3d3cuY2x1YnNuemRhcnRzLmNv
Lm56gh13d3cuY29sbGVnZXNwb3J0c3BvcnRhbC5jby5ueoIfd3d3LmNyb3NzcmVj
cmVhdGlvbmNlbnRyZS5jby5ueoIZd3d3LmRhcmZpZWxkY3JpY2tldC5jby5ueoIT
d3d3LmZhc3RwaXRjaC5jby5ueoIYd3d3LmZyYXNlcnRlY2hjcmlja2V0Lm56ghJ3
d3cuZ2tzcG9ydHMuY28ubnqCFnd3dy5nb29kbWFucnVyYWwuY28ubnqCGnd3dy5o
YWxzd2VsbHVuaXRlZGZjLmNvLm56ghd3d3cuaGFtcHN0ZWFkY2x1Yi5jby5ueoIc
d3d3LmhhcmJvdXJjaXR5aG9ja2V5Lm9yZy5ueoIXd3d3Lmhhd2tmb290YmFsbC5v
cmcubnqCEHd3dy5oYmJjdC5vcmcubnqCFHd3dy5oYmJ1c2luZXNzaHViLm56gg13
d3cuaGJyZWRzLm56giZ3d3cuaGVhbHRoeWZhbWlsaWVzaW52ZXJjYXJnaWxsLm9y
Zy5ueoIWd3d3LmhpZ2hsaWdodGNhbS5jby5ueoIRd3d3Lmhud2FmYy5vcmcubnqC
GXd3dy5ob2NrZXltYW5hd2F0dS5vcmcubnqCGnd3dy5ob2NrZXl3YWlyYXJhcGEu
b3JnLm56ghh3d3cuaG93aWNrbmV0YmFsbC5vcmcubnqCFnd3dy5oc29iYnVybnNp
ZGUuY28ubnqCGHd3dy5rYXBpdGlzb2Z0YmFsbC5jby5ueoIVd3d3LmthdW1hdHVh
dGMub3JnLm56ghl3d3cua2VyaWtlcmltdGJjbHViLmNvLm56ghZ3d3cubWFyaXN0
YWxiaW9uLmNvLm56ghx3d3cubWFyaXN0aW52ZXJjYXJnaWxsLmNvLm56ghZ3d3cu
bWFyaXN0cnVnYnkub3JnLm56ghh3d3cubWFybGluc25ldGJhbGwuY28ubnqCFHd3
dy5tY29ic3F1YXNoLmNvLm56ghB3d3cubW9vbG9vLmNvLm56gh53d3cubW9vbG9v
Y29tbXVuaXR5cnVnYnkuY28ubnqCGHd3dy5tb29uc2hpbmV0cmFpbC5jby5ueoIf
d3d3Lm1vcm5pbmd0b25ib3dsaW5nY2x1Yi5jby5ueoIWd3d3Lm10c3F1YXNoY2x1
Yi5jby5ueoIQd3d3Lm5vcnRocy5jby5ueoIVd3d3Lm5vcnRoc3J1Z2J5LmNvLm56
ght3d3cub3R1bW9ldGFpZm9vdGJhbGwuY28ubnqCHXd3dy5wYXBha3VyYXJ1Z2J5
bGVhZ3VlLmNvLm56ghx3d3cucGF1YW51aWxpZmVndWFyZHMub3JnLm56ghh3d3cu
cGhvZW5peHN5bmNocm8uY28ubnqCE3d3dy5waG90b2NhcmQuY28ubnqCF3d3dy5w
bGF5c29mdGJhbGwub3JnLm56ghx3d3cucHJlYmJsZXRvbmZvb3RiYWxsLmNvLm56
ghp3d3cucHVrZWtvaGVzb2Z0YmFsbC5jby5ueoIXd3d3LnJveWFsb2FrYm93bHMu
Y28ubnqCEnd3dy5zYWlsaGJjLm9yZy5ueoIUd3d3LnNhc2Zvb3RiYWxsLmNsdWKC
Fnd3dy5zYXNmb290YmFsbC5vcmcubnqCFnd3dy5zaGFya3NzcG9ydHMuY28ubnqC
End3dy5zcGVlZHdheS5jby5ueoIYd3d3LnNwb3J0bm9ydGhsYW5kLmNvLm56ghV3
d3cuc3BvcnRub3J0aGxhbmQubnqCFHd3dy5zcG9ydHluZXdzLmNvLm56ghV3d3cu
c3VtbmVyYm93bHMuY28ubnqCF3d3dy5zeWRlbmhhbXJ1Z2J5LmNvLm56ghd3d3cu
dGFzbWFudm9sbGV5Lm9yZy5ueoIRd3d3LnRocy5zY2hvb2wubnqCDnd3dy50cmZ1
LmNvLm56ghZ3d3cudW5pbW91bnRhZmMub3JnLm56ghN3d3cud2FoaW5ldG9hbWNj
Lm56ghR3d3cud2F0ZXJwb2xvLm9yZy5ueoIgd3d3Lndlc3RsYW5kbW90b3JjeWNs
ZWNsdWIuY28ubnqCHXd3dy53aGFuZ2FyZWlicmlkZ2VjbHViLmNvLm56ghh3d3cu
d29ybGRwb3dlcmxpZnRpbmcubnqCC3d3dy53c3JhLm56MEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUAdH7agzGt
MxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFnU7DAmgAABAMARjBEAiBDXh+2
aF896Nl2LMKAcpHmIrhG/SXRsr+g87mKjJwBqQIgZBeny+kj9WrZhbqUeYTiiZxR
vE8FMG7JiUUl/+x7aQMAdgApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0
eAAAAWdTsMDtAAAEAwBHMEUCIC633Mt5ShjAKd6twRLPglRv1eUvT7T8hrhz/oz+
qIWJAiEAw4pQ0LWnCIRbva8ltyWmFsWtXfNCKA7ncLpZqAb56D4wDQYJKoZIhvcN
AQELBQADggEBAF/8Wb3091kZ16k7WbyDRHDjT2iDOAXVMdXTA7z4LIVCsvL4DNMi
b8y9h+RuBudBg34tPLp1mEUA2Pwb9x2YMubt1MZV0G1ExxS9vRx1Gi1jdge7mVIu
K70AtJ7cV+MwE6jjWSWE0TlEY7toYVDMWXAdlFHuFSxqJ5BH1VkucY915ti+vzjr
EjsAzDwzyklBNUnzdmnO7mtL7kMn+kbFhY+7akYaGKHMaUsqtv7VQYehwSdlMRXy
L2x+Gqd4FkfU08/eOTp9e94xHVoa0ZlbHfMMAAQgL0mogWjZ7tqQaDBY1dJbEltx
PEpNRij9nxHN9TeAUeLo3T9xKlxOcqDS2nE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtXHfWmek0nFwopneuZdQ
QO27uyRFQljfqxehHnWopZ2a/z4pgyZXHnLwEJbQHZIWJvzq81aNFA1jASLQUNgb
98Q57JpidIQYWDM+b2m4AXngO1TBa4bj6eAXyqdfsU2dxjoxTrBDZUvN15mfMnRu
Z2JtLCSV8UqP5sb1VU1q0HGC8izMJ4e0M1MjLATeuRKY0sehHEG5LPQfVu3iWLoS
5ugaNlLeOpjvwBS/dmC9mcmRRt4XSK4wEArvF7LmVFaOLLNsiubUAZ6ttICPTIg7
W2cPXZYX/UzuCwLXXoR3CDcpFjgTGTpVTMikIpmnG8tQ0sk8zSQiLlFGU5H/IKKJ
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289458559216763043609675867159763607697758
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-27 04:42:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-25 04:42:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pukekohesoftball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22905285808237148769342182296520714496857356268453069911746329118662246799605494439773989899586064109041143047429433885126503142569827871260323050478617973810787417673666953656763384227104853386418975839361631991844425252124187833774507944891511768132520163592293583025363905297831081188135843471537499199303848834692087496641123898726925987471530671903151606976353355835908116980114548223406178665632983669470795130861550848249374450486184213727118626699978524254409756319609649602244472906474491012543157780414467817439371238169739260170685020709042410306924117193448972319342104291625384101421084744647292118796621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b9be03943bc082f158240cf981b413baed346f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2261 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016753b0c09a00000403004630440220435e1fb6685f3de8d9762cc2807291e622b846fd25d1b2bfa0f3b98a8c9c01a902206417a7cbe923f56ad985ba947984e2899c51bc4f05306ec9894525ffec7b6903007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016753b0c0ed000004030047304502202eb7dccb794a18c029deadc112cf82546fd5e52f4fb4fc86b873fe8cfea88589022100c38a50d0b5a708845bbdaf25b725a616c5ad5df342280ee770ba59a806f9e83e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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