www.aucklandsoftball.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c9:84:d4:2c:2e:53:28:cd:8c:8c:20:15:f9:39:78:92:f6 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.aucklandsoftball.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c9:84:d4:2c:2e:53:28:cd:8c:8c:20:15:f9:39:78:92:f6
Serial Number (int): 329910173304863243994545930260536746349302
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a8:cc:3b:66:97:18:1b:53:81:a4:49:af:7a:78:4c:ba:3a:4b:f6:82
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:61:c3:1d:67:aa:f9:0b:be:06:03:f2:e2:2a:a6:03:fd:05:ad:0a
Fingerprint (sha256): 96:13:ea:10:8a:5d:32:20:a1:c5:c0:8a:84:4e:8f:80:7f:13:61:90:d8:7b:4f:7a:21:fd:4e:28:38:d1:1c:cf

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.aucklandsoftball.org.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.aucklandsoftball.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.aucklandsoftball.org.nz
www.bayolympic.co.nz
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.burwoodafc.co.nz
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.cornwallcricket.co.nz
www.developyourlegacy.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.footballsouth.co.nz
www.gameoftwohalfwits.com
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.katikatifc.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.mainlandfootball.co.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nzfootball.co.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.pcbasketballclub.co.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rivertongolf.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.scpacers.co.nz
www.slalomnz.org.nz
www.southlandbmxclub.co.nz
www.sportcanterbury.org.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.tcafc.co.nz
www.teawamutuafc.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.waitematarowing.org.nz
www.wakefieldfc.nz
www.westernafc.com
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name aucklandsoftball.org.nz

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
www.aucklandsoftball.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz

Certificate

The complete raw certificate details for www.aucklandsoftball.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOJjCCDQ6gAwIBAgISA8mE1CwuUyjNjIwgFfk5eJL2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTcwMTM3MzlaFw0x
OTEyMTYwMTM3MzlaMCYxJDAiBgNVBAMTG3d3dy5hdWNrbGFuZHNvZnRiYWxsLm9y
Zy5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJp8Tw6pZ+V8Iaue
1PRlIcSKKUkZHCo0hmmDyW2NQaB0CD0Jt/4B4A1laNXzhdMXpvvZMSn1RchNH1so
EcbaKUynE3Lc7iiIof5KvhNkFBDUWX4OJvSZQAZGmw+Wr2mgmHHB4/GSQiAiolSl
SOKBUqCZVvh5OBJeO8tsP31FEyHTZ3ovGb52ISnuhnWO/3CgFAvJL1/Jwu5yxt4L
doxEX1HbA4SKvsK+/H/pnMr1vZV9ReFud7N3XHKOh7vYO3CDaMto2wVHQcE68BMC
KcnYiUQK9W4dxFYrp2nVMaq0SoseAijDSzbmIPpixi5TxaEKGEv5aYVeO1dU8cog
ErIN0CsCAwEAAaOCCygwggskMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUqMw7ZpcY
G1OBpEmvenhMujpL9oIwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCNsGA1UdEQSCCNIwggjOgg53d3cuYWZmLm9yZy5u
eoIXd3d3LmFyZG1vcmVtYXJpc3QuY28ubnqCGnd3dy5hdWNrbGFuZGJhc2ViYWxs
LmNvLm56ght3d3cuYXVja2xhbmRmb290YmFsbC5vcmcubnqCH3d3dy5hdWNrbGFu
ZHNlcnZpY2VyaWZsZS5vcmcubnqCG3d3dy5hdWNrbGFuZHNvZnRiYWxsLm9yZy5u
eoIUd3d3LmJheW9seW1waWMuY28ubnqCEHd3dy5iYmFmYy5vcmcubnqCGHd3dy5i
b3dsc3NvdXRobGFuZC5jby5ueoIZd3d3LmJvd2xzd2VzdGNvYXN0Lm9yZy5ueoIb
d3d3LmJyb29rbHluY3JvcXVldGNsdWIub3JnghR3d3cuYnVyd29vZGFmYy5jby5u
eoIad3d3LmNhcGl0YWxmb290YmFsbC5vcmcubnqCGXd3dy5jZW50cmFsZm9vdGJh
bGwuY28ubnqCGnd3dy5jZW50cmFsZm9vdGJhbGwub3JnLm56ghx3d3cuY2xldmVk
b250ZW5uaXNjbHViLmNvLm56ghF3d3cuY21zcG9ydC5jby5ueoIZd3d3LmNvcm53
YWxsY3JpY2tldC5jby5ueoIbd3d3LmRldmVsb3B5b3VybGVnYWN5LmNvLm56ghd3
d3cuZHJ1cnlmb290YmFsbC5jby5ueoIQd3d3LmVjYmFmYy5jby5ueoIXd3d3LmZv
b3RiYWxsc291dGguY28ubnqCGXd3dy5nYW1lb2Z0d29oYWxmd2l0cy5jb22CGnd3
dy5ncmVlbmhpdGhlZm9vdGJhbGwub3Jngg93d3cuaGJjYy5vcmcubnqCGXd3dy5o
ZW5kZXJzb25zcXVhc2guY28ubnqCDnd3dy5ocmMub3JnLm56ghp3d3cua2FyYWth
c3BvcnRzcGFyay5jby5ueoIUd3d3LmthdGlrYXRpZmMuY28ubnqCE3d3dy5rZWly
dW5nYS5vcmcubnqCGnd3dy5rZWlydW5nYWFydGlzdHMub3JnLm56gh53d3cubGFk
aWVzc29jaWFsY3ljbGluZy5vcmcubnqCEnd3dy5saW5maWVsZC5jby5ueoIWd3d3
Lmxpbndvb2RydWdieS5jby5ueoIUd3d3Lmxpbndvb2RydWdieS5jb22CGnd3dy5t
YWlubGFuZGZvb3RiYWxsLmNvLm56ghZ3d3cubWFraWtpaGkuc2Nob29sLm56ghZ3
d3cubWFudXJld2FtZXRzLmNvLm56ghl3d3cubWFvcmliYXNrZXRiYWxsLmNvLm56
gh13d3cubWFybGJvcm91Z2hmb290YmFsbC5jby5ueoIOd3d3Lm1ibmMuY28ubnqC
GXd3dy5tb3VudGZvcnR3YXRlcnBvbG8ubnqCFHd3dy5teWZvb3RiYWxsLmNvLm56
ghx3d3cubmVsc29uYmF5c2Zvb3RiYWxsLmNvLm56ghd3d3cubmVsc29ubmV0YmFs
bC5jby5ueoIgd3d3Lm5ld3BseW1vdXRoY3JvcXVldGNsdWIuY28ubnqCDnd3dy5u
ZmYub3JnLm56ghB3d3cubmhibXgub3JnLm56ghR3d3cubnpmb290YmFsbC5jby5u
eoIQd3d3Lm56c3JhLm9yZy5ueoIWd3d3Lm9yYXRpYXVuaXRlZC5jby5ueoIQd3d3
Lm9zc3NhLm9yZy5ueoIdd3d3LnBhcGFtb2Fmb290YmFsbGNsdWIuY28ubnqCGnd3
dy5wYXBhbW9hZm9vdGJhbGxjbHViLm56ght3d3cucGFwYW51aXJlZHdvb2RhZmMu
Y28ubnqCGnd3dy5wYXBhdG9ldG9ldW5pdGVkLmNvLm56ghp3d3cucGNiYXNrZXRi
YWxsY2x1Yi5jby5ueoIWd3d3LnJhdmVuc2JvdXJuZS5jby5ueoIcd3d3LnJlZGJl
YWNoc3F1YXNoY2x1Yi5jby5ueoIWd3d3LnJpdmVydG9uZ29sZi5jby5ueoIhd3d3
LnJvc2VnYXJkZW5zY3JvcXVldGNsdWIub3JnLm56ghp3d3cucm95YWxvYWtyYWNx
dWV0cy5jby5ueoIWd3d3LnNjaG9vbGdyb3VuZC5jby5ueoITd3d3LnNjaG9vbGdy
b3VuZC5ueoISd3d3LnNjcGFjZXJzLmNvLm56ghN3d3cuc2xhbG9tbnoub3JnLm56
ghp3d3cuc291dGhsYW5kYm14Y2x1Yi5jby5ueoIad3d3LnNwb3J0Y2FudGVyYnVy
eS5vcmcubnqCFnd3dy5zcG9ydHNncm91bmQuY28ubnqCFnd3dy5zcG9ydHNwb3J0
YWwuY28ubnqCFnd3dy5zcG9ydHRhc21hbi5vcmcubnqCGHd3dy5zcG9ydHdhaXRh
a2VyZS5jby5ueoIVd3d3LnNwb3J0d2FpdGFrZXJlLm56ghN3d3cuc3BvcnR5YXBw
LmNvLm56ghV3d3cudGFrYXB1bmFhZmMuY28ubnqCD3d3dy50Y2FmYy5jby5ueoIW
d3d3LnRlYXdhbXV0dWFmYy5jby5ueoIVd3d3LnR1cmJvdG91Y2gub3JnLm56ghh3
d3cudWx5c3Nlc25lbHNvbi5vcmcubnqCHHd3dy51cHBlcmh1dHRyaWZsZWNsdWIu
Y28ubnqCGHd3dy53YWlib3Bmb290YmFsbC5jby5ueoIYd3d3LndhaWhla2V1bml0
ZWQub3JnLm56ght3d3cud2FpaG9yYWNsYXl0YXJnZXQuY28ubnqCGXd3dy53YWlr
YXJlZ29sZmNsdWIuY28ubnqCGnd3dy53YWl0YWtlcmVjaXR5ZmMub3JnLm56ghh3
d3cud2FpdGFrZXJlcnVnYnkuY28ubnqCGnd3dy53YWl0ZW1hdGFyb3dpbmcub3Jn
Lm56ghJ3d3cud2FrZWZpZWxkZmMubnqCEnd3dy53ZXN0ZXJuYWZjLmNvbYIid3d3
Lndvb2xzdG9ucGFya2luZG9vcmJvd2xzLm9yZy5uejBMBgNVHSAERTBDMAgGBmeB
DAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AHR+2oMxrTMQ
kSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABbT0VKVEAAAQDAEcwRQIhANq6bRV7
hTm7caCENC6Q1qYUwLNQJvQs6zGMCKDpGTjMAiBHFzqHdr+pDHpvr5WoUojJXGXs
lPQ9/nYpndbs1fucTQB3AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iN
AAABbT0VJ30AAAQDAEgwRgIhAPwPjSiJjciXM1WhsC29NaXXtumkXJHtR4NFcD5T
tVBPAiEAnf0+hzHu9lqfi52dvLAD/LQU8FmHFIl1MQxZFpgPYtcwDQYJKoZIhvcN
AQELBQADggEBABMxDD/jd5ptBrEniq+dTe9Po9P3+5GEJ+9T6YB455IbrhEntuMi
T+E7TcknfrYDNz7WQxCchTa5NyWOCTBtLRz5mcjyIoTonkrgMs4CbPYWPLGJZz8O
VvPF7sU0U64j3a5OpdbBhUYXj2OAnhsObRqd9vMA00BMf7nQxC1vH4WqFUU5ESKz
Yh1avmmP/7yDTcQQtfyvFqjdpBgg9oOv9AWJlRrKRzM6EYqwqnddFKKwkmtYr+ms
1dbC5MZmgxZbMTSuxad9M9OHwytaJI3LPmQts+y9Bynn3CS6XbOXz7et8lxZve31
dcf+ofneTizX/KaIuHRxvqnLCp1NoRdbrgA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnxPDqln5Xwhq57U9GUh
xIopSRkcKjSGaYPJbY1BoHQIPQm3/gHgDWVo1fOF0xem+9kxKfVFyE0fWygRxtop
TKcTctzuKIih/kq+E2QUENRZfg4m9JlABkabD5avaaCYccHj8ZJCICKiVKVI4oFS
oJlW+Hk4El47y2w/fUUTIdNnei8ZvnYhKe6GdY7/cKAUC8kvX8nC7nLG3gt2jERf
UdsDhIq+wr78f+mcyvW9lX1F4W53s3dcco6Hu9g7cINoy2jbBUdBwTrwEwIpydiJ
RAr1bh3EViunadUxqrRKix4CKMNLNuYg+mLGLlPFoQoYS/lphV47V1TxyiASsg3Q
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329910173304863243994545930260536746349302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 01:37:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 01:37:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.aucklandsoftball.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19501997927311314011874439860896565877916432178422032827729444311576977354292917600407854570671987914348498753766128715064959273417338496088143459114145761609244304458986444964748489241150214179802045558011734798427476593355106455764676077769154900371423692135369621176393296184230851114540258361910595316172598737383918200750477877523230543070435230314333441737573930012895357216903663965794909488248061871405361116899360673225934646038484949305260548548014310803409303046903534275327264846675306066932795466268929817846097542792824018645836705173364759234848957303676530609649827673512461615659773788395709987147819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a8cc3b6697181b5381a449af7a784cba3a4bf682
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3d1529510000040300473045022100daba6d157b8539bb71a084342e90d6a614c0b35026f42ceb318c08a0e91938cc022047173a8776bfa90c7a6faf95a85288c95c65ec94f43dfe76299dd6ecd5fb9c4d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3d15277d0000040300483046022100fc0f8d28898dc8973355a1b02dbd35a5d7b6e9a45c91ed478345703e53b5504f0221009dfd3e8731eef65a9f8b9d9dbcb003fcb414f05987148975310c5916980f62d7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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