www.eden.rugby

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5f:f0:ed:b6:d4:6c:52:18:96:74:c7:2f:e3:4b:fc:fa:8d was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.eden.rugby

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5f:f0:ed:b6:d4:6c:52:18:96:74:c7:2f:e3:4b:fc:fa:8d
Serial Number (int): 293983931654342188479255353977968890018445
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 95:94:30:4d:c8:3a:0c:c0:4b:9d:de:a4:8c:5e:36:3f:2c:90:95:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:15:4f:77:9e:a4:81:1a:73:95:09:27:d1:e1:1d:65:c6:42:a3:11
Fingerprint (sha256): a2:94:36:d0:6e:45:3d:e1:38:2d:5c:88:ea:6f:a2:69:8b:b5:fe:0c:49:a1:1d:17:ee:95:fe:23:1e:c7:af:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.eden.rugby

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.eden.rugby

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.badminton.org.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.blokarthb.co.nz
www.bluerovers.co.nz
www.bowlsbop.co.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.nz
www.christchurchmetrocricket.org
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.collegesportsportal.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.darfieldcricket.co.nz
www.eden.rugby
www.fastpitch.co.nz
www.frasertechcricket.nz
www.gksports.co.nz
www.goodmanrural.co.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.howicknetball.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kerikerimtbclub.co.nz
www.maristalbion.co.nz
www.maristinvercargill.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.morningtonbowlingclub.co.nz
www.mtsquashclub.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nzblackpowder.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sailhbc.org.nz
www.sasfootball.club
www.sasfootball.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sharkssports.co.nz
www.sportauckland.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sportynews.co.nz
www.sumnerbowls.co.nz
www.tasmanvolley.org.nz
www.ths.school.nz
www.trfu.co.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.whangareibridgeclub.co.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz
www.wsra.nz

Other certificates including the domain name eden.rugby

(limited to 100 certificates)
www.sportycrm.com
www.sportsground.com
sportycrm.com
eden.rugby
sporty.org.nz
hbnetball.co.nz
www.sportsground.com
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
www.eden.rugby
sporty.org.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.eden.rugby in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjfnK5+4BdFEZy7oxWD2Y
QpowbYg0hYUPgvhBWPcp/5rg8PpVG7JsEmp9rqJhv3S+rj82KNfengWRDxtHI0dv
2TfkisKrYXGlttPCpZRbpL6Mui7Of+UkmQvdexkacGbMbeH5nGGdwA/U6DG0MItj
VIy7Y3Ch2l5R68kHDRbZc6s3KZSYZdu/BPqunD8FcVmjvTHdSxLpTph4K3rJjVR7
NCisAVwZDoDOD+Xe8YSxt8tA/f1YYBwqKUdxcSDTTwp9BxeXKK4z7lQLFAAI5bsN
qp9W8JzfIb8kDmCbu6aNpQYDdVy41yBlUVK39Lm3UGA5Xy+ja6xZPfHGfX8n008y
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293983931654342188479255353977968890018445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 20:46:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 20:46:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.eden.rugby'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17922778322879091443770575133516603834996219306898696915668354618997794146922520461491971669695249970536434213526555849649329397275523518683916562343502196361979689786577672414962075746684981410000766745778616602151094325272667561581737774155458471988789001216426679158144996485628042269378622231150979670809749415605835945099577054424001698857492913684694807438940822590762077868001081145107633354582256179880293041430611167724303376637239867660722626965882553146364257836650990901326738318781882905008301615344207713809942164157913395277961784013372396665011000116494446694939831238327412187061995112001960043033287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9594304dc83a0cc04b9ddea48c5e363f2c90951e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2255 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001687cae39ec00000403004730450220719cde0d8022706b7106bddf405682f2dc5194fac8da5306b516403969f09548022100890e72239241d78c7f3b07290ae71507af4ce361f7abeba28b36ba9c7259e19900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687cae39f00000040300473045022100823535ebe995c8cad0b62e8166d803fa0eecfefb0f8cb54b5040cd0c0a076ba30220030dc8d84a02c7b002d8c07e704ecb7f87144fa61bcca1affadaf81b07b34027
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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