starling.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:29:77:93:22:8f:32:0c:54:17:1c:a3:db:fc:9f:52:02:ef was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=starling.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:29:77:93:22:8f:32:0c:54:17:1c:a3:db:fc:9f:52:02:ef
Serial Number (int): 275447376939122869468809625164181738226415
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:1f:1e:1d:50:85:0b:f5:bc:b0:e1:36:5c:89:d3:58:f3:ee:af:21
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 89:7f:72:ce:ca:81:d1:0d:b7:cb:0a:b9:47:ec:88:5a:fc:00:73:a9
Fingerprint (sha256): a4:62:63:b7:e7:0c:5c:e2:e4:d8:6f:cd:88:2d:f0:4b:ce:9f:8a:56:89:8e:f7:9b:4c:0a:4f:29:e6:db:15:53

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate starling.org.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for starling.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.diocesan.school.nz
bowlsnapier.co.nz
cjrs.co.nz
courtinthebay.co.nz
drysdale.kiwi
kaiapoinetball.co.nz
kirweenetball.co.nz
mahe.kiwi
mahedrysdale.kiwi
mca.org.nz
mcnetball.co.nz
ngaiwi.school.nz
patumahoerugby.co.nz
prebbletonrugby.co.nz
sport.aotea.school.nz
starling.org.nz
taurangasports.co.nz
tearohafootball.com
tepukesports.co.nz
waitematarugby.co.nz
warkworthnetballclub.com
www.belfastrugby.co.nz
www.bopgolf.co.nz
www.bowlsnapier.co.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cathcollege.school.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.cjrs.co.nz
www.courtinthebay.co.nz
www.darfieldrugby.co.nz
www.devonportsquash.org.nz
www.drysdale.kiwi
www.greenislandbadmintonclub.net.nz
www.greertonmaristnz.org.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbaysquash.co.nz
www.hbcricket.co.nz
www.hpnc.org.nz
www.huttaikido.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kapitigymsports.co.nz
www.kirweenetball.co.nz
www.kjcc.org.nz
www.mahe.kiwi
www.mahedrysdale.kiwi
www.mandevillesports.co.nz
www.mca.org.nz
www.mcnetball.co.nz
www.merivalepap.co.nz
www.mgcarclubcanterbury.nz
www.mpcricket.org.nz
www.mtbtauranga.co.nz
www.netballwaitakere.co.nz
www.ngaiwi.school.nz
www.northharbourwaterpolo.co.nz
www.northshorerugby.co.nz
www.nzpca.org
www.nzssfootball.co.nz
www.otta.org.nz
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.ponekerugby.com
www.prebbletonrugby.co.nz
www.primarysportscanterbury.org.nz
www.register4rugby.co.nz
www.sctrials.co.nz
www.silverdalerugby.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.sportslink.org.nz
www.squashauckland.org.nz
www.starling.org.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.taupohockey.co.nz
www.taurangafarmersmarket.co.nz
www.taurangasports.co.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.waitematarugby.co.nz
www.warkworthnetballclub.com
www.zephyr.org.nz

Other certificates including the domain name starling.org.nz

(limited to 100 certificates)
www.hblp.co.nz
sporty.org.nz
www.sporty.co.nz
sporty.org.nz
www.sportslink.org.nz
www.rugby-foundation.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
sporty.org.nz
starling.org.nz
www.rugby-foundation.org.nz
www.hbcricket.co.nz
www.sportsground.com
sporty.org.nz
www.rugby-foundation.org.nz

Certificate

The complete raw certificate details for starling.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvsdVOFRovE23FXRxxsH
eIvifPeCIwIB+xsZxdcE4uOUC/Uo85uNAKCJTezQq7otmh8ucw73G1KSuW+1moKX
hDLCRqzMB7ehVeLpHZKt/X5YyIObbn7LVmj4lciheFsGGwvHgu+iKvVDMldvKhhT
GvZctP21uPhFXA67Og5P5u5JTBnL7krlfRgOdyiWI/5mlZVLNiSuFGuU/0kYjN98
X9RykrK9hmb2tUvG8RHYlB9yX3m1fGSanLQpKWh3C2dXNu66p6IJCnOanbGbnyoF
KVYle/PlPEQaBjJROh0OPhS2lcyPdlT0smeyNpG3g73k0qr5fcQpnG8JbLLRMFDp
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275447376939122869468809625164181738226415
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 01:06:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 01:06:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'starling.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19059574957718638087760418935456986168491697358834488461402549241185291015283489272131119861893653168759711643706385769419169361170990426107480787392898752262881690524458583610376840691748975156963864343922716598082381676912143060914744118714011813180852308583363827361564260178224169789005139250812620616303863018603304927163160859662901749857702963268237975709087757071025556535711632882043954896160446952942312559266897260041042841270041145341172098471392284941495682005464854395254070132821238321603247465797055803386225929980955154431451691364125880370163833623504227111926676762195673215071952229682168338639163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d41f1e1d50850bf5bcb0e1365c89d358f3eeaf21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2074 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.aotea.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mca.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b7ac0f400000403004730450220342258898c21a3b1034e285f52618cba4288d2b5bd5ac68071f2f4b7c2d5a560022100cae175100ac9154ba77b04c8547dac23bda8a74af0d3f034aa17c8bf07163751007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c3b7ac2d90000040300483046022100f83869e9c3b5afe85f571dbd2bc174f5853787c409d8654cdaccbf5193de4fe8022100ce244159f5441ce30356d6e3c39b2b34a4b9ccf165e0d74886618a7f8b37584b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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