sporty.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:28:dc:ae:ba:1d:5d:c9:63:78:06:0e:b2:1c:74:f6:31:d9 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:28:dc:ae:ba:1d:5d:c9:63:78:06:0e:b2:1c:74:f6:31:d9
Serial Number (int): 275241489865699173592308704515737924284889
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 9f:01:96:ed:27:df:f4:6d:2a:6a:a0:8e:a4:f9:1a:03:6c:cc:af:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8c:ac:0b:2b:34:87:db:be:ae:40:29:21:3a:25:48:76:e7:eb:26:de
Fingerprint (sha256): 98:7a:28:56:a6:fe:49:e6:57:33:82:c7:f7:bc:7a:87:91:5b:1d:10:8d:f8:f9:6f:0b:77:70:e9:25:10:db:70

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sporty.org.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
arrowtownrugby.co.nz
basketballhawkesbay.co.nz
bopgolf.co.nz
bowlswaikato.co.nz
canterburywaterpolo.org.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
cyclingsc.co.nz
eden.rugby
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
greenacrescountry.org.nz
hampsteadclub.co.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbmagpies.co.nz
hbnetball.co.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
highlightcam.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
horouta.co.nz
hpnc.org.nz
huianetball.co.nz
ie19.co.nz
ie19.nz
karakarugbyclub.co.nz
kirweerugby.co.nz
kjcc.org.nz
manawatusoftball.co.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
marsdensport.school.nz
membermanager.co.nz
merivalepap.co.nz
metrofootball.org.nz
mff.nz
mountsports.co.nz
mtbtauranga.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzteachersgames.co.nz
otakisportsclub.co.nz
parklandsrugby.co.nz
pngolf.co.nz
pointrugby.co.nz
ponsonbyrugby.co.nz
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
sked.co.nz
soulutionzsports.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sporty.org.nz
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
supersixes.co.nz
taradaleint.school.nz
totaltouch.org.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
waikato-softball.org
waimakunited.org.nz
wanakafootball.nz
wdta.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLfSeF+YH91OgCXPRvkM
hWWCFoHCVLdgaXpa3zVJBXkEX5ToPsXcqgZiwVrhILOU6lS4C710wfLVR3TFDKKC
0w9jfCoiWpiexTZb5sGMA/srgiMmatjjhuC/0SWccpbIrhbwaZ6VDS1tp/beL8Lm
wmwsj26zXaLFUvvMNMThe6jMyDXPpn2exOqq13TVTud/fiXPuEGOV0uzVX4RhEHJ
02ygdrpg+1VusZVpVIPi4ifNF0w//KsjCRTyBC/rJY9FdVGN1wZ3BZsvdacAqaZq
VGgK/hVBN11GDRoq3DG4UPGCtfWKpJ8Ev/Y/DzWO6gQEVQL8JTNIXWsPFnxU6on/
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275241489865699173592308704515737924284889
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 19:03:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 19:03:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20288774874791486978756016159813700823922510436300269361787476414517037401436217464358465078388194707894076291191456356311015260335068118879308548711103586207900997002951747359900760595027935979337582677181266120993089293657843165396956993255906583439401810640878895017045967881443696326331275946683713777830199498126447146526986835812509101134506846163894290718199242159004000743575548295131301626889598623145025278867797426221679041370735785639328787994392674847625193007875199182140890935736761528232890086073282456947797012885359922264788935515164226127069856281396427742914337447854291536728556574800180345962379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f0196ed27dff46d2a6aa08ea4f91a036cccaf98
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikato-softball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3bac3b4200000403004730450221009bd51ce2898aa5033d4f28a1b7d9d886d56fb56d2343910942b262eef39b8650022036b4dd4ebc6b362f207bd157e7f7cec8ee7f71032b640c10de0a77e48d14eab700760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3bac3b2f0000040300473045022006903aaeef87f1b7484af79a727c03b9057927c49369d1df198a308c308fcdcd022100a56ee133a412167c5a77d03df8ba8cfcf92f96ab6f5e6a27e26a3ec3ebadc4ef
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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