www.thesalmonrun.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:e3:82:3a:6c:bb:f5:a9:6b:fd:4c:11:ab:e1:2a:63:8f:c6 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.thesalmonrun.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:e3:82:3a:6c:bb:f5:a9:6b:fd:4c:11:ab:e1:2a:63:8f:c6
Serial Number (int): 338754058084395537459920986680602472452038
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 88:60:2c:1b:e8:52:76:1e:32:9b:d5:99:b4:e5:e5:e6:6e:3c:18:52
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 29:96:13:dd:11:55:61:6c:c7:ee:be:dd:5b:41:56:51:00:d9:cb:74
Fingerprint (sha256): a7:05:3d:e1:7d:f4:82:c8:6f:56:c6:c1:2c:67:fb:e8:fb:87:f3:7f:44:3d:03:08:2c:e2:4b:e6:da:56:3e:f2

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.thesalmonrun.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thesalmonrun.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.bayolympic.co.nz
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.brooklyncroquetclub.org
www.burwoodafc.co.nz
www.businesshb.nz
www.capitalfootball.org.nz
www.carltonjuniorsrugby.co.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.cmydt.co.nz
www.cornwallcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.footballsouth.co.nz
www.glenviewsoccer.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.helensvillerugby.co.nz
www.hendersonsquash.co.nz
www.karakasportspark.co.nz
www.katikatifc.co.nz
www.kbhs.school.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.mainlandfootball.co.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nff.org.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.otahuhusoccer.org.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.pcbasketballclub.co.nz
www.ravensbourne.co.nz
www.rivertongolf.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.slalomnz.org.nz
www.southlandbmxclub.co.nz
www.southlandfootball.org.nz
www.sportcanterbury.org.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.tcafc.co.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihoraclaytarget.co.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.wakefieldfc.nz
www.westernafc.com
www.woolstonparkindoorbowls.org.nz
www.worldseriescricket.co.nz

Other certificates including the domain name thesalmonrun.nz

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
amdg.org.nz
sporty.co.nz
sportnorthland.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.pkjsports.co.nz
sporty.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
sporty.co.nz
sporty.co.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
sporty.co.nz
www.thesalmonrun.nz
amdg.org.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
sporty.co.nz
www.christchurchmetrocricket.co.nz
www.unimountafc.org.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for www.thesalmonrun.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyrIMwpXB9oFD5F9WD4s
/o7MpIkpcr3Z5ShYa0CknKR5M4toOwlIq1IPkm1OAtxJQgQVkSoij0UdCDGEvPTl
w5s9Ycb4O+vf7nbxAJcvqmXnMG7MME5TdVq4PKpaJ0fNWdaSCDewfoPZAhSA5APM
jwcABfHmqAEA6GFcwKz71d1HthuP0Ra+5hbiA0FMX3okL7M9aGGMz35owlfSA56y
V11Eiu3zBwkeoopHbVc7DGLi4TQdWnTVPVppIvKlgR3n2SZb0wNfoZjVhp2D4DbC
LENoG1ajhJbqlBSJJ3cV/zsR9tliXjl6qk2O0nbv/VwAqgkyT/G7AzpNOARvDDN4
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338754058084395537459920986680602472452038
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 00:23:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 00:23:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thesalmonrun.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18073174214836063172474161950084574929458141279796849033685980640277245454006433233296586575487885528301551230935276661379264151426127111653027474066349140792820531861818000572111241611572244790605734875041589463064891386871593758017426789147662907077201300538054496986080720630913321231091149012153327624346871654568927599297810893784627026927914210914599522163408972234199760507204506206748551889281043267859153579941616905936674178963761825199039524063706103275839191915322159136633133534812352172894805597756765486267071336524459147192816734901910617110080302939770337072461147886144508997629793846893750940563517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							88602c1be852761e329bd599b4e5e5e66e3c1852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e8141bf60000004030046304402200d25237dc0df15969acdb6b83ebedb614541ff17d31385d5fc1fa4ad00a5e2c6022057d4ca2e74f97a7c3dc9af86d4b04065926ff11d607636eb80027868f133062e0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e8141c0130000040300473045022068956cb1ddfc582e6534225ed9a8f5e46137936abcbe006eed1499dd6990f905022100edb950e2a7fed47167d6930180f33909e186a8e0d450860edce58b57efcad2ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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