sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:8e:e6:02:d7:d9:ba:ce:76:f2:c8:c8:ad:ed:cc:55:be:ad was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8e:e6:02:d7:d9:ba:ce:76:f2:c8:c8:ad:ed:cc:55:be:ad
Serial Number (int): 397074977031406885981685863202645356166829
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 94:89:31:be:a4:1c:61:c6:ba:89:08:b5:a7:77:9d:a0:cd:44:4a:6d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 03:e1:28:12:a0:e7:b5:41:5f:8e:1a:75:48:d6:e5:f0:92:51:8e:02
Fingerprint (sha256): 97:37:28:96:50:0e:75:51:15:14:be:e4:5f:69:f4:c8:2f:0f:d8:00:60:b3:64:67:55:50:35:0f:df:27:2f:0c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ardmoremarist.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
bayolympic.co.nz
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
burwoodafc.co.nz
businesshb.nz
capitalfootball.org.nz
carltonjuniorsrugby.co.nz
centralfootball.co.nz
centralfootball.org.nz
clevedontennisclub.co.nz
cmsport.co.nz
cmydt.co.nz
cornwallcricket.co.nz
druryfootball.co.nz
footballsouth.co.nz
glenviewsoccer.co.nz
greenhithefootball.org
hbcc.org.nz
helensvillerugby.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hrc.org.nz
karakasportspark.co.nz
katikatifc.co.nz
kbhs.school.nz
keirunga.org.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
mainlandfootball.co.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
marlboroughfootball.co.nz
mbnc.co.nz
mmcc.co.nz
mountfortwaterpolo.nz
mrra.co.nz
myfootball.co.nz
nelsonbaysfootball.co.nz
newplymouthcroquetclub.co.nz
nff.org.nz
nhbmx.org.nz
nzfootball.co.nz
nzsra.org.nz
oratiaunited.co.nz
papamoafootballclub.co.nz
papamoafootballclub.nz
papanuiredwoodafc.co.nz
papatoetoeunited.co.nz
parklandsunited.co.nz
pcbasketballclub.co.nz
ravensbourne.co.nz
rivertongolf.co.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
schoolground.co.nz
schoolground.nz
southlandbmxclub.co.nz
southlandfootball.org.nz
sportcanterbury.org.nz
sportsground.co.nz
sporttasman.org.nz
sportwaitakere.co.nz
sportwaitakere.nz
sporty.co.nz
takapunaafc.co.nz
taradalefootball.org.nz
teawamutuafc.co.nz
thesalmonrun.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihekeunited.org.nz
waihoraclaytarget.co.nz
waikaregolfclub.co.nz
waitakererugby.co.nz
wakefieldfc.nz
westernafc.com
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz
worldseriescricket.co.nz
wssfa.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IZt0E+/GhFk+d+e+yyX
S2C1ys0McQoCFsZWvRDyk6LN846zqvqgEmYfmf6ANjr7zpocFLMnz+/yKCoT8Cix
YRmzx0oD16cij9w+2Ok4s+39XcCCNtUkmwgdF31lcDbS37QJPlkq3LP0PQOTO5k2
bHbogqpNZZERd3dcR+rB6264sFkJKbS2ZgAfmrnG607ncuWLF4a6iCWTEbSQ7lRx
OSqLT2nAN5eDyf6sNnLV30HW2qxb+w7tWEjoLIevLSA5hDb2r0+nqDLnpVvyRN+N
yQ2nWUzrTLvMdHMy9gVxI4oGn4MUKBpYTjHB1o++myyZ/Rfu1CPYv8tqj/KAER8b
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 397074977031406885981685863202645356166829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-09 21:52:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-10 21:52:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26323856823672476978954987127706884802971057693458073126090783706388166044372559053802039614847909335249881361610814535626626271443219439922787823166728320663863931094632073650678263264182993028425800459668447144637878649309265650193332320269930814562805077665064246232846472917029930686956017147850864489240639284842619378288379048760288993254798501262742719223486806018554814806835907214174258577812022900819357503103768096833097534698867774605297161349393648738715429213146187384873184216859313218127982142165987469282046974991891051176586725685554711338088375777364537858226082259831227507305581701775131672517521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							948931bea41c61c6ba8908b5a7779da0cd444a6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1897 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017788febe950000040300483046022100948d68dfe2f7eac29817d6e04fb9cd6522e08c51928aff2bc61fb9e8104508c90221008fe859e53fcb0be0347b2c8b2b8af78d4eecaefe910c201c50abad03ca10e0b60076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017788fec09a0000040300473045022100c0a5af76897c7f09e94bce064b4dee951af771432ed4966a75298a65fc624cc802207be0ece368a09fb1cf3098dc32ca54417d04f27970c75030bcb3d9275d31db12
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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