www.sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:65:3f:50:d0:02:56:f0:04:c6:26:30:4f:88:c5:bd:86 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:65:3f:50:d0:02:56:f0:04:c6:26:30:4f:88:c5:bd:86
Serial Number (int): 302305322607142669918977300035047415725446
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ab:fa:c1:4e:c5:b5:bc:e6:43:9d:24:e2:0e:26:70:8f:ac:0b:f0:0f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0e:7d:51:c6:7d:a2:5a:0b:52:7a:68:03:14:c5:5f:a1:20:a6:b0:7b
Fingerprint (sha256): a3:f6:ba:e0:26:0d:39:aa:f3:03:4a:2d:24:c0:85:d4:67:33:f1:be:f1:de:ec:71:b7:39:bf:54:1e:46:fb:06

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sporty.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aklbadminton.com
capephysio.co.nz
gonville.school.nz
masseyrfc.co.nz
mca.org.nz
mcnetball.co.nz
netballchristchurch.org.nz
omusc.org.nz
tairuaslsc.org.nz
taradaleint.school.nz
taurangasports.co.nz
www.aklbadminton.com
www.aucklandleague.co.nz
www.aurfc.co.nz
www.avalonrugby.co.nz
www.bophockey.co.nz
www.brownsbaybowls.org.nz
www.burwoodparktennisclub.kiwi
www.canterburywaterpolo.org.nz
www.capephysio.co.nz
www.cathcollege.school.nz
www.centralcitybaseball.org.nz
www.darfieldrugby.co.nz
www.dunedinnetball.co.nz
www.eastcoastexpo.co.nz
www.flaxmillbaymotel.co.nz
www.gonville.school.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayfarmersmarket.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.hpnc.org.nz
www.kjcc.org.nz
www.magpies.co.nz
www.mandevillesports.co.nz
www.maraetaitennis.co.nz
www.marsdensport.school.nz
www.masseyrfc.co.nz
www.mca.org.nz
www.mcnetball.co.nz
www.merivalepap.co.nz
www.mgcarclubcanterbury.nz
www.montressors.co.nz
www.netballchristchurch.org.nz
www.netballwaitakere.co.nz
www.northcanterburyrugby.co.nz
www.northharbourwaterpolo.co.nz
www.northshorerugby.co.nz
www.nzssfootball.co.nz
www.nzsssc.co.nz
www.nzsssc.org.nz
www.ojcc.org.nz
www.omusc.org.nz
www.pngolf.co.nz
www.ponekerugby.com
www.primarysportscanterbury.org.nz
www.purc.co.nz
www.rowandale.school.nz
www.rugbyfoundation.co.nz
www.rugbyfoundation.com
www.rugbyfoundation.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sporthb.co.nz
www.sporthb.net.nz
www.sporthbchb.co.nz
www.sporthbwairoa.co.nz
www.sportspark.co.nz
www.sportspay.co.nz
www.sporty.co.nz
www.storans.school.nz
www.tairuaslsc.org.nz
www.takapunarugby.co.nz
www.taradaleint.school.nz
www.taupohockey.co.nz
www.taurangafarmersmarket.co.nz
www.taurangasports.co.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.waikatotouch.co.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for www.sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcxrA9WqvDcP83qkLk8j
ZECGaOI3Rrr5IzrINyq7Pcldh5avgZp9/AJ0v9ooEDNxSdGqpvc4N7zYXhb8Yo4x
0LgIrSVLr/yGaR/KynWeEioyudzvsq0R1pl7G45Dwt1YdAZprcAc2lEwgDMUi3CH
4ZxHiQJyws2O6A+d6dWbbBzrHLewGh/NtuPcGZ+BRBtLe8VkkFkUohv8XBgpi3V9
5HLU8i+NmBUex7iLU4uKIUkrfqZoX+Coocnav/dE7/RohOWIN3kGCdNIKpcT7/WY
cqXbDnnKAIhOUMap+JtGrLpLyNTz6uNMZrgTSUPwErmKHb47sjxH+iryUJ4M7APH
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302305322607142669918977300035047415725446
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-23 03:48:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-23 03:48:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19415262946002472890576352483088207411862530755511272910717854594333927523542680240844349343596378298577438833543157078948531869362017503067649652370850178952397212603466680794220307044458208973126270583212905173653541423610694667962205844924917278292749718929936124657570187148228755968321154204022333239542960615660790605275044796938506056028316511050020817665476326277664504101975030545198616617367208260529187995905492830577795799261450432231716765216550116410945290831990205261917614030706359353355746772974878067029921112395962532118081749402262818185783249440744457469572993930656017439578870079223725126043413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							abfac14ec5b5bce6439d24e20e26708fac0bf00f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2035 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capephysio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aklbadminton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capephysio.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.masseyrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tairuaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016879097cf7000004030046304402205362bfaf7faf4b1215c69a2945d4ac8f36c834fe4cf5fa33aa13574407e832e902204cb11b23e94ad5cb1c02f9030a4181a69e1056eb8db4b38aa07fc0e00a5b006500750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016879097d490000040300463044022006cbe3fdccab8835d3100918362246c322701fa5a5a2d683abd56d7457e3a2e702201b14fbea5f126ea3259b3c9110406e67a5d7d3fa8c617c5d22921c8a8edceba9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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