mossburn.school.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:35:18:d7:23:f9:10:82:7e:3f:37:7b:1d:0b:6d:5a:24:03 was issued on by Let's Encrypt.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=mossburn.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:35:18:d7:23:f9:10:82:7e:3f:37:7b:1d:0b:6d:5a:24:03
Serial Number (int): 366517127719191406229502573491258557867011
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: fa:73:62:ff:81:ec:16:77:5a:d6:84:88:e1:a3:ff:bd:63:c7:20:ca
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a8:9f:e8:81:55:a6:86:63:d0:d2:2f:9b:08:c2:f0:db:7a:c5:3a:df
Fingerprint (sha256): 9c:53:af:d8:de:c4:5a:4f:45:d0:4f:ec:b6:e6:4a:bc:a5:b9:d8:24:e1:5d:26:07:5b:71:aa:b8:ce:80:24:7a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate mossburn.school.nz

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mossburn.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aria.school.nz
ashbrook.school.nz
ashhurst.school.nz
awhitu.school.nz
birkdalenorth.school.nz
cannington.school.nz
cosgrove.school.nz
cpanel.two.skoolsites.co.nz
dargavilleprimary.school.nz
ebbettpark.school.nz
firth.school.nz
foxton.school.nz
geraldine.school.nz
geraldineprimary.school.nz
glenavy.school.nz
glenmassey.school.nz
gorgeroad.school.nz
helensville.school.nz
hillside.school.nz
hns.school.nz
horahoracambridge.school.nz
ilminster.school.nz
kahutara.school.nz
kamoprimary.school.nz
kingsgate.school.nz
knapdale.school.nz
lichfield.school.nz
manaia.school.nz
mangatangi.school.nz
matamataintermediate.school.nz
matamataprimary.school.nz
mimi.school.nz
mmps.school.nz
mossburn.school.nz
ngaruawahia.school.nz
ngutunui.school.nz
norsewood.school.nz
omarama.school.nz
ongarue.school.nz
ormond.school.nz
oruaiti.school.nz
otaki.school.nz
pakurangaint.school.nz
pap-west.school.nz
peninsulaprimary.school.nz
petone-central.school.nz
two.skoolsites.co.nz
www.aria.school.nz
www.ashbrook.school.nz
www.ashhurst.school.nz
www.awhitu.school.nz
www.birkdalenorth.school.nz
www.cannington.school.nz
www.cosgrove.school.nz
www.dargavilleprimary.school.nz
www.ebbettpark.school.nz
www.firth.school.nz
www.foxton.school.nz
www.geraldine.school.nz
www.geraldineprimary.school.nz
www.glenavy.school.nz
www.glenmassey.school.nz
www.gorgeroad.school.nz
www.helensville.school.nz
www.hillside.school.nz
www.hns.school.nz
www.horahoracambridge.school.nz
www.ilminster.school.nz
www.kahutara.school.nz
www.kamoprimary.school.nz
www.kingsgate.school.nz
www.knapdale.school.nz
www.lichfield.school.nz
www.manaia.school.nz
www.mangatangi.school.nz
www.matamataintermediate.school.nz
www.matamataprimary.school.nz
www.mimi.school.nz
www.mmps.school.nz
www.mossburn.school.nz
www.ngaruawahia.school.nz
www.ngutunui.school.nz
www.norsewood.school.nz
www.omarama.school.nz
www.ongarue.school.nz
www.ormond.school.nz
www.oruaiti.school.nz
www.otaki.school.nz
www.pakurangaint.school.nz
www.pap-west.school.nz
www.peninsulaprimary.school.nz
www.petone-central.school.nz
www.two.skoolsites.co.nz

Other certificates including the domain name mossburn.school.nz

(limited to 100 certificates)
skoolsites.co.nz
skoolsites.co.nz
*.ebbettpark.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.firth.skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
kiwischools.co.nz
kiwischools.com
skoolsites.co.nz
mossburn.school.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
kiwischools.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
kiwischools.com
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
kiwischools.com
kiwischools.com
skoolsites.co.nz
kiwischools.co.nz
skoolsites.co.nz
kiwischools.co.nz
kiwischools.co.nz
skoolsites.co.nz
skoolsites.co.nz
glenavy.school.nz

Certificate

The complete raw certificate details for mossburn.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSbni9n6Y/GUKpMotWOE
2vXoEembb+QKxk1KesyBsmzjCcM0vDzL1OKGIwQ/m+Mg5KFyiK6n3GlgmtfnIeM1
KOx6h//Ty9UV+OmY9GGSF+xP0OhmeMQAl10scHXD+CLSpaS/TnIARYRTbwhdqflY
/VD+h40Znj1VCq4D3or+/+1clunOnZ26TmBAU+0t55GbsWr4UUhsxNRkr2cEVI6W
aJUlIylq8E+a94CUaHW8X64QH3L4BHHf+MXviwg8Lyu3+OLPWWDNSnLUSz+Z8cMo
zhejF0EEJbhlwdMIv2Y+dOGmYmuci5Kj6dVXFqkpP2qgiRLDkD5Jo9ik4HShUTt7
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 366517127719191406229502573491258557867011
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 04:41:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-26 04:41:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mossburn.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21858411272105597371524231225383172025206902594763326771144849913783224123638670794464838514212125708905762373021017520228253423216617190345074219553336425209991986537759183037504388202927285967963851903602249290177972699100963845607536394655765444139211929866956793524094697794386650098874264551256380172006709307069316122465467947603685854241188317359365192033601235074595322288962852536513302944957877035300610530533087887803705714786089383919943686151910982276545707639468503038011975117262536520800216580560682642828378170009296565652121118300579980604704517621100034009459251209265694910458692134736744979069739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fa7362ff81ec16775ad68488e1a3ffbd63c720ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aria.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbrook.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosgrove.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebbettpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manaia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngutunui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormond.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petone-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aria.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashbrook.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosgrove.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebbettpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manaia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngutunui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ormond.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petone-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018fbdb790c3000004030046304402202365ba420566fec22c8d6932b18d1499161dbe9c77a5ee4286d93ab864f3072902207259682a0e32d07bf329d72efbd2fa371b0ec0b82ee403f255c2d33329bad6f10075001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018fbdb790cc000004030046304402204f6fdd083180c026bd5f5c1d11338df8bd21ab28bc0d9e7f42fd67c133cc95ab0220232462bfe8bca44f5c8d6ae2ba6778fa1cea59fd5d18252ca83b9d5d4af6687b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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