www.brooklyncroquetclub.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:16:68:ca:6f:ca:b8:3b:23:33:12:30:4d:d4:19:55:cf:3b was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.brooklyncroquetclub.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:16:68:ca:6f:ca:b8:3b:23:33:12:30:4d:d4:19:55:cf:3b
Serial Number (int): 268962360690477012989901118454693671325499
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:66:83:ec:c0:d6:22:6b:5a:c5:4a:29:bd:49:15:3c:89:95:e0:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 49:8b:13:04:b4:94:d6:e4:ab:c2:08:ed:9c:d7:6a:39:86:f7:ec:40
Fingerprint (sha256): a1:88:57:16:a8:db:3f:9b:e6:f0:da:f2:f6:73:51:ed:5e:d3:1e:8e:93:65:a8:6a:6e:ec:f0:13:a9:d7:d1:64

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.brooklyncroquetclub.org

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brooklyncroquetclub.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.bayolympic.co.nz
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.burwoodafc.co.nz
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.cornwallcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.footballsouth.co.nz
www.glenviewsoccer.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.katikatifc.co.nz
www.kbhs.school.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.mainlandfootball.co.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.pcbasketballclub.co.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rivertongolf.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.slalomnz.org.nz
www.southlandbmxclub.co.nz
www.southlandfootball.org.nz
www.sportcanterbury.org.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.tcafc.co.nz
www.teawamutuafc.co.nz
www.themightypclass.org.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.waitematarowing.org.nz
www.wakefieldfc.nz
www.wanakafootball.org.nz
www.westernafc.com
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name brooklyncroquetclub.org

(limited to 100 certificates)
oratiaunited.co.nz
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
waibopfootball.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
sporty.co.nz
sporty.co.nz
hockeymanawatu.org.nz
sporty.co.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
sporty.co.nz
www.schoolground.nz
maristinvercargill.co.nz
maristalbion.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.brooklyncroquetclub.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgVeeJ96sQZ2e4prFcwq/
21oLgRGKfHhe/+TutIgzs+kOXIW78EiGHsDPya231OpOX20GcRrtEmSpYPWsbm5p
Exa2Y1oStVmDE0Ys+JQjSqzkZ5/rgdGmSl/lzt8j5fb6Vv+sr1VmBoDVk7yRWNyK
npsnBDQt8e8iMjWzPk+3OB617/nE9blHEnL29IG3sz8e0wQmMhe4E7whRRqf5yDH
yCVuvfBM1NQrTq2/zYJ52w+qkZxHTXnTkFXMLaq0zZmLTWtVHOw0PZSJMlns9xg3
ZrA0l0phsm+QFHWlhAUrrXheHe6w+GIb8qKwQMxXHjf1gdy/FVhFlVQPceJjPDES
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 268962360690477012989901118454693671325499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 22:27:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 22:27:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brooklyncroquetclub.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16327947286070287930485235034937924850545655859738451593155199921101052111876214985332881500451317826155488024163846065678507593091441037185932242609367264927661746610274195757886079349351136094122135413449780815733718279651202075507604805178401646701515726982281734861836245261057194711381289562998819165188511062275290936967452960964412370555406051856681926258971329265205340580578773305059225882270468780750468282046276534999832094044782305402553185459782916949059467096800707201291719026595200473400860530843634001700155594042742087885273925719504261425850607214635825832962174859923442334835584645550716646134369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							706683ecc0d6226b5ac54a29bd49153c8995e09a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2223 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.themightypclass.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001665b28799b0000040300473045022100b7257fdd328ec3d6d7e3c5ac08a2a3a4dc4b1180eb00a729df69caedb0911fd10220542695fa11787db98cdda4fa7ee46ead3acb444c57caea649efb1b7a4aba957a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665b287b6f000004030047304502210095b9c0b54757c68d6296d4640101082db0cc18a213ddb4cdf7a03c02a6404bde02200160f87d6769e3fd34ffd809ec38cf3bda5adae48fd485adeed7e86addab5092
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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