loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:31:1e:b4:72:c9:18:7d:af:d8:89:52:0f:33:18:64:90:c1 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:31:1e:b4:72:c9:18:7d:af:d8:89:52:0f:33:18:64:90:c1
Serial Number (int): 365163793487602190109390453982172763427009
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: db:d7:2f:d7:e5:d4:e4:bf:51:57:13:69:4b:cb:64:85:49:33:60:98
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fd:6e:db:e5:ed:f6:2d:00:39:b8:be:9b:55:33:50:de:68:43:0b:fd
Fingerprint (sha256): 9d:36:7a:36:3d:ae:2d:b8:90:96:ab:25:cf:68:56:40:27:bf:bf:3d:41:86:87:80:ad:cb:f5:d1:aa:99:fe:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.prod.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.prod.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.prod.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.prod.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.prod.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
prod.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.prod.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.prod.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.prod.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.prod.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.prod.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)
loadbalancer.nix.jucy.co.nz
citrix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
sni.cloudflaressl.com
*.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
photos.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
mail.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
www.jucyrentals.de
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
jucy.co.nz
bookings.jucy.co.nz
sni.cloudflaressl.com
secure.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
*.jucy.co.nz
secure.jucy.co.nz
jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
photos.jucy.co.nz

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL8zCCCtugAwIBAgISBDEetHLJGH2v2IlSDzMYZJDBMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODAyMjAxODQyMzhaFw0x
ODA1MjExODQyMzhaMCYxJDAiBgNVBAMTG2xvYWRiYWxhbmNlci5uaXguanVjeS5j
by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMK9UAIywWGGhF+
u/zCBAvLLMKx5lxzfskPERXISM7kQl091P3+AxjSqBZyWWdFcA7lS4+sNP8DmY72
GJAyXCcQc1gMnYVHCsNcFEn7XktmgK0mmuUhVNWKRFqgGffJ9c615cWl/6pcKnF8
d0JHWVludPpe0weIE2APLyA3aH/d81llpcZaxYgafRFv+mjpGmJAWOUTZQnfHiTi
Yw5nAI+Mzj32fovrHhtC8gv7nL28WxU+3rB1uAcy7FfNpazaiSw+LX4Y0+k5BqxQ
3n4Y8nM+AMx0AJHIx5eLHpD0ToctyiY2JhwGqlQmntHNPSIgFp9Fp7viuZS4KYpS
qHN9H5UCAwEAAaOCCPUwggjxMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU29cv1+XU
5L9RVxNpS8tkhUkzYJgwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCBv4GA1UdEQSCBvUwggbxghJhdXRoLmp1Y3l3b3Js
ZC5jb22CEWNwLm5peC5qdWN5LmNvLm56ggpqdWN5LmNvLm56giZqdWN5LmNvLm56
LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIaanVjeS5jby5uei5wcm9kLmp1
Y3kuY28ubnqCHmp1Y3kuY28ubnoud2ViMS5uaXguanVjeS5jby5ueoIeanVjeS5j
by5uei53ZWIyLm5peC5qdWN5LmNvLm56ggtqdWN5LmNvbS5hdYInanVjeS5jb20u
YXUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56ghtqdWN5LmNvbS5hdS5wcm9k
Lmp1Y3kuY28ubnqCH2p1Y3kuY29tLmF1LndlYjEubml4Lmp1Y3kuY28ubnqCH2p1
Y3kuY29tLmF1LndlYjIubml4Lmp1Y3kuY28ubnqCEGp1Y3lzbm9vemUuY28ubnqC
LGp1Y3lzbm9vemUuY28ubnoubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56giBq
dWN5c25vb3plLmNvLm56LnByb2QuanVjeS5jby5ueoIkanVjeXNub296ZS5jby5u
ei53ZWIxLm5peC5qdWN5LmNvLm56giRqdWN5c25vb3plLmNvLm56LndlYjIubml4
Lmp1Y3kuY28ubnqCC2p1Y3l1c2EuY29tgidqdWN5dXNhLmNvbS5sb2FkYmFsYW5j
ZXIubml4Lmp1Y3kuY28ubnqCG2p1Y3l1c2EuY29tLnByb2QuanVjeS5jby5ueoIf
anVjeXVzYS5jb20ud2ViMS5uaXguanVjeS5jby5ueoIfanVjeXVzYS5jb20ud2Vi
Mi5uaXguanVjeS5jby5ueoINanVjeXdvcmxkLmNvbYIpanVjeXdvcmxkLmNvbS5s
b2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCHWp1Y3l3b3JsZC5jb20ucHJvZC5q
dWN5LmNvLm56giFqdWN5d29ybGQuY29tLndlYjEubml4Lmp1Y3kuY28ubnqCIWp1
Y3l3b3JsZC5jb20ud2ViMi5uaXguanVjeS5jby5ueoIbbG9hZGJhbGFuY2VyLm5p
eC5qdWN5LmNvLm56gg9wcm9kLmp1Y3kuY28ubnqCE3dlYjEubml4Lmp1Y3kuY28u
bnqCE3dlYjIubml4Lmp1Y3kuY28ubnqCDnd3dy5qdWN5LmNvLm56gip3d3cuanVj
eS5jby5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCHnd3dy5qdWN5LmNv
Lm56LnByb2QuanVjeS5jby5ueoIid3d3Lmp1Y3kuY28ubnoud2ViMS5uaXguanVj
eS5jby5ueoIid3d3Lmp1Y3kuY28ubnoud2ViMi5uaXguanVjeS5jby5ueoIPd3d3
Lmp1Y3kuY29tLmF1git3d3cuanVjeS5jb20uYXUubG9hZGJhbGFuY2VyLm5peC5q
dWN5LmNvLm56gh93d3cuanVjeS5jb20uYXUucHJvZC5qdWN5LmNvLm56giN3d3cu
anVjeS5jb20uYXUud2ViMS5uaXguanVjeS5jby5ueoIjd3d3Lmp1Y3kuY29tLmF1
LndlYjIubml4Lmp1Y3kuY28ubnqCFHd3dy5qdWN5c25vb3plLmNvLm56gjB3d3cu
anVjeXNub296ZS5jby5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCJHd3
dy5qdWN5c25vb3plLmNvLm56LnByb2QuanVjeS5jby5ueoIod3d3Lmp1Y3lzbm9v
emUuY28ubnoud2ViMS5uaXguanVjeS5jby5ueoIod3d3Lmp1Y3lzbm9vemUuY28u
bnoud2ViMi5uaXguanVjeS5jby5ueoIPd3d3Lmp1Y3l1c2EuY29tgit3d3cuanVj
eXVzYS5jb20ubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56gh93d3cuanVjeXVz
YS5jb20ucHJvZC5qdWN5LmNvLm56giN3d3cuanVjeXVzYS5jb20ud2ViMS5uaXgu
anVjeS5jby5ueoIjd3d3Lmp1Y3l1c2EuY29tLndlYjIubml4Lmp1Y3kuY28ubnqC
EXd3dy5qdWN5d29ybGQuY29tgi13d3cuanVjeXdvcmxkLmNvbS5sb2FkYmFsYW5j
ZXIubml4Lmp1Y3kuY28ubnqCIXd3dy5qdWN5d29ybGQuY29tLnByb2QuanVjeS5j
by5ueoIld3d3Lmp1Y3l3b3JsZC5jb20ud2ViMS5uaXguanVjeS5jby5ueoIld3d3
Lmp1Y3l3b3JsZC5jb20ud2ViMi5uaXguanVjeS5jby5uejCB/gYDVR0gBIH2MIHz
MAgGBmeBDAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2Vy
dGlmaWNhdGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0
aWVzIGFuZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUg
UG9saWN5IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRv
cnkvMA0GCSqGSIb3DQEBCwUAA4IBAQA7kwYuCiCVhQe+OZUfJ10Wqg5MIlz5jT9c
PocNbD20b8ArEC0cXzQuAAl/fdUA/lPNp7Wo/PCJqlyDG2G/FlNYENMmVNPqyvYV
wURE5JxcbZ7kB1UkTia06Zf99hCClaB/yOmmHza3Ewzr8afqaD4mDp6/GI4nmLoP
da/zTQ/Wqtbff81AAjwyuce665bJM78GRvZZMaFfWX7O4/UEXpREUVrY5dZeCiZz
v2MGPC2xwM4kjCMpy9rCCoCqvy4d2EiJfb0FOBPrF+eF2v47yJeGiyxLeJRgAIwC
QdRdR4zsw8177KoWyfVdFheK2BRaUzZiFYPQj6WU+HqGTeh/mr15
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwr1QAjLBYYaEX67/MIE
C8sswrHmXHN+yQ8RFchIzuRCXT3U/f4DGNKoFnJZZ0VwDuVLj6w0/wOZjvYYkDJc
JxBzWAydhUcKw1wUSfteS2aArSaa5SFU1YpEWqAZ98n1zrXlxaX/qlwqcXx3QkdZ
WW50+l7TB4gTYA8vIDdof93zWWWlxlrFiBp9EW/6aOkaYkBY5RNlCd8eJOJjDmcA
j4zOPfZ+i+seG0LyC/ucvbxbFT7esHW4BzLsV82lrNqJLD4tfhjT6TkGrFDefhjy
cz4AzHQAkcjHl4sekPROhy3KJjYmHAaqVCae0c09IiAWn0Wnu+K5lLgpilKoc30f
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 365163793487602190109390453982172763427009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-20 18:42:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-21 18:42:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24621873063686967210826681262361145620657668339840574357319842944898736125373617885198274080770194802017319542208786353867029616912418853284127385074147763216767371707442801423102834106087859452191631089907005610401397957273606503807611536541509692069364068405557263533831912417473886889152117356934336565186192462320480890811694314021690253212654644707419541191026641328819220474124453577125135584195169679619083637989433104015466409487371366579566832604007411198461310879181162582290994975243712064566584332630400840168221696968440389817282728401675759488719172090990427931587254029432524823594599754724313780789141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dbd72fd7e5d4e4bf515713694bcb648549336098
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1781 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.prod.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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