www.rugby-foundation.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:41:d2:bb:7a:3a:88:f5:83:e1:23:28:59:b9:66:93:38 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rugby-foundation.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:41:d2:bb:7a:3a:88:f5:83:e1:23:28:59:b9:66:93:38
Serial Number (int): 315188965773349876426121884044434447176504
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d0:be:54:ab:48:f2:63:5d:8e:97:9e:d4:a0:c1:c3:c0:c7:e8:73:95
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0b:13:3c:2e:e9:f3:66:0a:4c:64:40:f1:f9:f9:6d:17:98:b6:fe:38
Fingerprint (sha256): a5:f9:80:c4:e8:2d:5b:11:c9:49:b1:e6:b4:d4:12:36:cb:b0:f5:67:8f:3e:b2:98:d1:57:2e:39:02:33:74:d1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rugby-foundation.org.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rugby-foundation.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

howicksoftball.co.nz
olympicwrestlingnz.com
starling.org.nz
swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlsnapier.co.nz
www.bowlswaikanae.com
www.cometswimming.co.nz
www.cornwallparktouch.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hblp.co.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.lincolnbowlingclub.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtbtauranga.co.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.olympicwrestlingnz.com
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.sissnetball.co.nz
www.southcanterburytouch.co.nz
www.sportotago.co.nz
www.squashauckland.org.nz
www.starling.org.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.tgahockey.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name rugby-foundation.org.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
squashauckland.org.nz
www.karakacricket.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.hockeysouthcanterbury.co.nz
sporty.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
trfu.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.rugby-foundation.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0pRmWa3yQKP23p1gVIHx
ZWXHL18gr5wQln0jnnPI9yV2g7BGoXNjK+uCjoBGZyuwBGxVOTNVJU74AQJXau3z
pCvzDow4EmmlQb3jQ832Fev+UPz7TWe4wxIxaBKxFO8fFU9nJDR69WpLiy48gsLB
uITcBA6kMIsZfVuEwazIcu7FmYgGeDSvhfi3iNLrRtWxO2zYoaY2r5IFxD40JrLD
6HFmmHw+G7AIqh6I2MT4XykhiZ9j5IqMuFyD+okEwujLECjZBUfxhYwYbQoaXgNH
BL35E7hhiMXJCOX3bdo7XZTVc5nm1xdX8/aNZCTFQmV5BBCiHvTsOYfFCMuIxkeH
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315188965773349876426121884044434447176504
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-15 23:23:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-14 23:23:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rugby-foundation.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26583222714568160811576679347879480357377043063479647970983983034080246235616449918925544236445725189175066570439279750676141804188481847498331805385984120313829954106200707461146686573169933518770482204995437910713597226883556514670916938208962157211489990851383587801589331613785713488171990697726130912004704678252328675739898458418170569448584122976390435794986758541319100659837479942265633206998538587687689328378326672563178848756061160715225443719341789579795166124231292599459824855760707477129222444017886933637732450300927134858948359197058487381350309110696699133088950695555617310012267358764012235360137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d0be54ab48f2635d8e979ed4a0c1c3c0c7e87395
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3773f2950000040300473045022100aba317e383c55d032e887f0d7246eadb675e01d01b0f39886f114627a91fab6e02207f17491f3fbc62e7c437e220973df84b88c5e20995d800271e627b5eb9c6431c00750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3773f284000004030046304402204f69fe57ab915fb3dbfcd3ad9d20a2872b5c867dd063095bb08802d27da28ae4022030a5b451f8099494d5c1d51cfd2d217052c1b7ef541621196a3d15e6da3b1d30
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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