sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:58:43:55:19:6b:eb:13:be:4a:90:1d:93:eb:18:d5:1c:94 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:43:55:19:6b:eb:13:be:4a:90:1d:93:eb:18:d5:1c:94
Serial Number (int): 291371206220884295874323353042756310473876
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:7c:11:7e:fd:ff:48:ed:dd:57:1e:3f:bd:57:d0:42:87:d6:31:11
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 98:05:18:8b:3d:3c:e2:1c:67:6e:e7:9e:db:53:bf:5d:9b:b5:09:fb
Fingerprint (sha256): 95:ae:b4:b1:e3:62:9e:3e:7e:dd:94:e4:ca:aa:2e:98:71:e8:a6:c5:92:27:d3:8d:c6:45:bc:64:d8:b8:1f:1f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
ahiparagamefishclub.co.nz
aucklandmarist.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bullernetball.co.nz
hastings-central.school.nz
heet.net.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
nelsoncarclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
nzpca.org
nztua.com
otahuhuroversrugbyleague.co.nz
parkvale.school.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
puhoisports.org.nz
schoolground.com
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sportsground.com
sporty.co.nz
stewartalexander.co.nz
stheliersbowlingclub.co.nz
tabletennis.org.nz
taierirugby.co.nz
tasportscycling.co.nz
terracechb.school.nz
touchnorthharbour.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
tutangiora.nz
ultrarunner.org.nz
volleyballbop.co.nz
wellingtonrnr.org.nz
wellsfordsquashclub.co.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs8/Wv0AI7YKzOo5HVwEK
/r+gYFiRgHvD8p7zG77QgF9Od7kVBH+xvWgE+gYXaVFrqbqE/Epv8kOL64E5Jo4+
DkndN0tAT5khLJTQAmLXfNW1hqkCe1XUJ7UFZcsGVVBMV5uQ/fND5ULonVBEmimN
mpNkACn4IP3P++gU08T3WPczgj+5DjQmhB/2lK4bBbSJFoDgbDZzIPrPr/SagcDI
ca0k9hPojoRtj252uE9zlT3V79jsXzCMw+c+1liC5yUPn15sLaOITUGkgwIR7tqH
ez53cWgf+ixmcSCAIBxgXNEoZ0XUlp/VUQ+TVJIEnYjFwMaq5UpQ05ka7We3ly10
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291371206220884295874323353042756310473876
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 22:07:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 22:06:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22699145748515881807362680027124077610193490325219795427819820214191135331847659388544475701042530273585454835442456339051407291062327128509163383534821622309367620796697975794502302061313046037406851049176893968776837017114328626442583748087057326517530082279705925747229811163592994432017746028673137183016310360642963198414686162784847726231185986901157432923068026115395784203803078437987406724372985911088698211865397904298316739746855649895682318342761937950647253207929632073044320719160822190218103305966325841011026930907200746750170231755312917550263964112417047313822500008327317235665125912423856222336053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							107c117efdff48eddd571e3fbd57d04287d63111
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfac765410000040300463044022068f9a186317b0251ad519281398c97d99dd2ff5f6440391cda81c964afb99c3a022062812babf684427b9991cb7b8a36334427cef1e27a758032db7edf59e18604df0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cfac765460000040300473045022100b82bf6577393a9d9fb3e0e15f0aee5a2be5edfedfb6dee3f4daaea972c68739402200c0699d3c75da12d67893dea7c2d8c189ffcbf3684a4581f05968484975d38e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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