www.hbcricket.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9e:d1:cf:67:da:f5:ad:c6:af:9a:a9:64:18:3d:ff:28:0a was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.hbcricket.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9e:d1:cf:67:da:f5:ad:c6:af:9a:a9:64:18:3d:ff:28:0a
Serial Number (int): 315380357331793743807913478474697474517002
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 21:90:2b:10:46:ca:6c:a9:ba:52:85:c8:7a:54:1f:fb:69:a1:52:42
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 5d:d6:1a:9f:be:c8:84:e8:ac:22:1a:33:65:a1:b5:a3:00:e4:03:15
Fingerprint (sha256): a9:66:46:ac:97:2a:cc:5a:f4:1e:bb:01:57:1f:1c:b1:0b:59:71:4e:fb:ce:f0:ac:76:11:b3:94:36:a4:0c:38

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.hbcricket.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.hbcricket.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arts.diocesan.school.nz
bowlsnapier.co.nz
cjrs.co.nz
courtinthebay.co.nz
drysdale.kiwi
hawkesbaynetball.co.nz
howicksoftball.co.nz
kaiapoinetball.co.nz
kirweenetball.co.nz
mahe.kiwi
mahedrysdale.kiwi
mtbtauranga.co.nz
ngaiwi.school.nz
olympicwrestlingnz.com
patumahoerugby.co.nz
pointrugby.co.nz
prebbletonrugby.co.nz
pukekoherugby.co.nz
register4rugby.co.nz
registerforrugby.co.nz
sctrials.co.nz
sport.aotea.school.nz
sportauckland.co.nz
sportauckland.org.nz
squashauckland.org.nz
starling.org.nz
suburbsrfc.co.nz
tearohafootball.com
tepukesports.co.nz
waitematarugby.co.nz
warkworthnetballclub.com
www.belfastrugby.co.nz
www.bopgolf.co.nz
www.bowlsnapier.co.nz
www.burnsiderugby.co.nz
www.canterburycountrycricket.co.nz
www.cdcricket.co.nz
www.chchfootballsquash.co.nz
www.cjrs.co.nz
www.courtinthebay.co.nz
www.devonportsquash.org.nz
www.drysdale.kiwi
www.greenislandbadmintonclub.net.nz
www.hampsteadrugby.co.nz
www.havelocknorthbridgeclub.co.nz
www.havelockski.org.nz
www.hawkesbaylandingpad.co.nz
www.hawkesbaynetball.co.nz
www.hbcricket.co.nz
www.hblp.co.nz
www.hnhs.school.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.invercargillnetball.co.nz
www.kaiapoinetball.co.nz
www.kapitigymsports.co.nz
www.kirweenetball.co.nz
www.lincolnbowlingclub.co.nz
www.mahe.kiwi
www.mahedrysdale.kiwi
www.mpcricket.org.nz
www.mtbtauranga.co.nz
www.ngaiwi.school.nz
www.nzpca.org
www.olympicwrestlingnz.com
www.otta.org.nz
www.papatoetoenorth.school.nz
www.patumahoerugby.co.nz
www.pointrugby.co.nz
www.prebbletonrugby.co.nz
www.pukekoherugby.co.nz
www.redcliffsbowls.co.nz
www.register4rugby.co.nz
www.registerforrugby.co.nz
www.sctrials.co.nz
www.silverdalerugby.co.nz
www.sissnetball.co.nz
www.sportauckland.co.nz
www.sportauckland.org.nz
www.squashauckland.org.nz
www.starling.org.nz
www.suburbsrfc.co.nz
www.supersixes.co.nz
www.tabletennissouth.org.nz
www.tearohafootball.com
www.tepukesports.co.nz
www.tgahockey.co.nz
www.waitematarugby.co.nz
www.warkworthnetballclub.com
www.zephyr.org.nz

Other certificates including the domain name hbcricket.co.nz

(limited to 100 certificates)
www.hblp.co.nz
supersixes.co.nz
eden.rugby
www.hbcricket.co.nz
www.mysporty.co.nz
hbcricket.co.nz
www.sportslink.org.nz
maristrugby.org.nz
hbnetball.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.mysporty.co.nz
ctfc.co.nz
sporty.org.nz
www.hbcricket.co.nz
www.bowlsnapier.co.nz
www.lincolnbowlingclub.co.nz
turbotouch.co.nz
sporty.org.nz
sporty.org.nz
starling.org.nz
www.hbcricket.co.nz
bowlsnapier.co.nz
www.mysporty.co.nz
eden.rugby
sked.co.nz
www.mysporty.co.nz
bowlsnapier.co.nz

Certificate

The complete raw certificate details for www.hbcricket.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zccgCClLQ0pZ5kV6ieJ
s/FWAwNqexYTQ9E3nHsHxTOyg2+pUxJSFGwkWxDiv3kTbu+RqcDh+DxkgmaqaHmG
W13KSrSgl9L0OXLRqa2zti4aklGbP1IIxDe1FTBclF6+KlZN19g3kD51NYd1pQv+
AOhiozNycGDoAW9dTBcr9a1yu266gmdtvX0kJBJZETO0698PHqlGK+0fbqUJDJh2
VYAe2o23+fWOWee6qlrsXSfcMKoCGm2uXb/2RJ7rqLSt5HmGPaZkJayB+Hka061s
l7Ivet1FEK2PjLYjTM3HvPpLE84KATvr248ch7kJTxIAbjgw2C+3EZgnMARdnKyy
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315380357331793743807913478474697474517002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 23:51:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 23:51:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.hbcricket.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26663458757574945894937867540366625837915308416226398045122346868124909013697330996318217136652756552190937487119200461060404093660664044337348354557343080315935328667021127715471790093222559668938219217884856195385371735255589470381728040013503135802441448719093016063154579693946493330258116645102419276740759029457788539011599367179265387049790181274115084890444426986343661104405881978842314716216334913028298422279674116051600923881247323815453474613970357123691765715556721117985702697486417239268562995902249919699721350140486503828756565636833900728426974058970608399892794668913313596068144392388107303695067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							21902b1046ca6ca9ba5285c87a541ffb69a15242
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2090 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arts.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'registerforrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.aotea.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cjrs.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.courtinthebay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahe.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaiwi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekoherugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redcliffsbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.registerforrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohafootball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warkworthnetballclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016752a61016000004030046304402204803f45af4eed98a1e9c883fc467c1cde7392e25238e1bef966693ccfd3efa9b022020160b3896f517de76d685c14501626d6bc71318217261713f73a52dc7eaaa11007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016752a61017000004030047304502207bf75da2bf85856856ff26f572f17125f493bbdc090762b3b543cf3c27867268022100934bcdb99e8d1b38b58dbb4e337d4d06e34529f74c9fd3d9b8798561deee910d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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