sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:cd:34:bf:ee:e1:4a:ac:ee:3d:05:6c:8f:1b:6a:48:dc was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:cd:34:bf:ee:e1:4a:ac:ee:3d:05:6c:8f:1b:6a:48:dc
Serial Number (int): 293936448284208706914100424874087959644380
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 64:b3:be:8a:f8:5d:61:8f:af:19:8a:fe:e8:3f:11:99:d9:fa:c4:5a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2e:c9:a1:4a:4c:f5:75:3b:f2:b6:4c:64:56:c0:76:4c:38:96:9a:d2
Fingerprint (sha256): 95:b8:03:a3:a6:28:ba:6a:96:27:52:29:3d:3b:81:6d:eb:ec:c6:e9:5d:c6:a6:b6:22:b9:e5:39:f3:0b:2f:5a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sporty.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amdg.org.nz
aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
blokarthb.co.nz
bluerovers.co.nz
bowlsbop.co.nz
bowlsstadium.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
maristinvercargill.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northgolf.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
purc.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
sporthb.co.nz
sporthb.net.nz
sporthbchb.co.nz
sporthbwairoa.co.nz
sporty.co.nz
squashauckland.org.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
westshore.school.nz
whangareinetball.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFJnMwvSnUlVQdc0Wb7F
lC4twx2gUXHg6IXaYLfvyAhy8ZVnuT1n5uEcV+0PR87GXtGJdkt5lG+/7HkvyMuJ
Uc4CFuAurI0HAqhi0BzAl3RtYvxdULNxgFifqFsX6DvC/WAG8C2gWIb4aWkAVuuG
HFGXnGTsq4yJIvYBOGAD7AGUtRHMkhczo8TX/jj1ow9/QnXdIvfyQkkhMBTP8ehf
7M1uKaZRVWCWhUnBNyrJGakqQqz6fTW1CfE9y9Vz3Mlh/dKrmPP8NpCeIY7Q6TuV
xYgehIgQzVIKrR97LRe6sjxbrXg2cPFO/a+aglmZWYN2BvnGk62zsXEFjitye5Eh
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293936448284208706914100424874087959644380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 21:17:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 21:17:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16704090749768238950837223466613167838498141141512666528349134600335951873261949398663177446212239225867327349650854923534040603240287953255315797266070278693255877527166140252356448748069482592412586905281350516795091894397846023225209311327312420428522815895043847761663152876890229910506647269874129500285224004717330638898447471641660722506795972394130591382673361588387734576519541947559613439194998331583081213632894303658323022443998999768227528094721857726537625412684557843977641288439514987828567558695993316461520833035595001441908683838602123360774151661810155459619399368192086401789862124209073716011511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64b3be8af85d618faf198afee83f1199d9fac45a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1852 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3fcf78710000040300473045022100cb8e7d8000cc6ced9f9fcaeb7671e320f52dcc96942a667328b426cef3fb600d022050a32061376ef54fd7f0b76a76e3e044a3910071bfb2ae5d2891d1f28eb226ee007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3fcf7a830000040300473045022100de0e19ce3456b8c782a4e5185f1c6cbeed08baf507ef8ab162fd4d41c5dc6ef3022026765498b78fd4d4e17569deb2dd8da10731424b030edfc27cca976db0c1ca7d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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