www.baseballnewzealand.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a4:37:c6:07:c1:1d:41:87:f9:eb:5f:44:20:56:25:c6:c5 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.baseballnewzealand.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a4:37:c6:07:c1:1d:41:87:f9:eb:5f:44:20:56:25:c6:c5
Serial Number (int): 317217301742137765095152771445453851313861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f2:42:2b:d4:29:e2:a0:1a:33:e4:8a:55:ff:48:72:0d:ed:cd:70:9e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:e5:32:d2:55:5c:00:f6:54:11:df:71:ef:82:f6:c1:f0:31:1c:9d
Fingerprint (sha256): aa:e4:c1:73:69:ca:2b:d4:3a:db:2b:d5:ad:2b:38:ac:81:28:70:40:32:5f:fc:53:00:93:7c:87:79:9a:ad:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.baseballnewzealand.org

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baseballnewzealand.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ashleyrugby.co.nz
www.athleticswanganui.co.nz
www.avondaleint.school.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.boxingnz.org.nz
www.cambridgenetball.org.nz
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.cyclingtimaru.com
www.dairyflattennis.co.nz
www.distanceridingnewzealand.co.nz
www.edenrugby.co.nz
www.ellesmererugby.org.nz
www.ghryc.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.hastingsintermediate.school.nz
www.hcwaterpolo.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.karakarugbyclub.co.nz
www.kereru.school.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.manurewarugby.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.mariancollege.school.nz
www.maristnh.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.netballkapiti.org.nz
www.netballmanurewa.org.nz
www.netballtaranaki.org.nz
www.nscbaseball.co.nz
www.nzteachersgames.co.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.orfu.co.nz
www.orokohangamusictrust.co.nz
www.papakurarugby.co.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.smognetball.org.nz
www.softballauckland.org.nz
www.southbridgerugby.com
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.stanthony.ac.nz
www.stjos.school.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tennismanawatu.org.nz
www.touchcanterbury.co.nz
www.touchsouthland.co.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.willowpark.school.nz
yes.stockx.co.nz

Other certificates including the domain name baseballnewzealand.org

(limited to 100 certificates)
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
getyourmacon.com
www.bowlswestcoast.org.nz
www.ophc.co.nz
melancia.eu
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
whangareirowingclub.org.nz
sportsground.co.nz
sportsground.co.nz
138111.co
manurewamets.co.nz
www.baseballnewzealand.org
www.schoolground.nz
www.waihibeachtennisclub.co.nz
whangareirowingclub.org.nz
www.diamondsportnz.co.nz
keirunga.org.nz
baseballnewzealand.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.baseballnewzealand.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrOlw/Yh8/HpR9ru40ea
AenZG99roPdVxZU7PeJWAR16W/Uub4XOYDn4kmWkS5GTiN1ir2FmZBtFGYdCOH9Y
S+OttXYwEKFO9ibiCt8R2CakofOVVDrykeTJf/x8IWqBtlLOp1yztGb1IHNnCkj3
AhdaYWybph8bl6E6NqtMIj3ntNu8xyiEjkqLyXZtnwiHxnw2+c8pM1uYUhIR6FI8
MSYM/KNiu0FudJjw8p2lVOQ2sSSY6JKnXUN3L538naxmDOybUnrRitbOZPwtQhAQ
DwNRtQ8J/7XkmsLe+vTUXLaolb2wnTAkbfU1uPjHb6uH/5Va8aCgbdhHS8/lkrK6
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 317217301742137765095152771445453851313861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 20:48:31 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 20:48:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baseballnewzealand.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22559005778454274422301892747048767357965818051961464894112730649499803544950285752340915463132819537373439655172233944557526236509990482753239377407862428263656873077727542487349689912923151273514928352720192135129001528416564483450169664942285352570330085617901332529052549397730566527781026067298370355682669847765456616526548127958919133595517058458634236438494108488524319197527168150389254508393423609623533428292651592020681480725340155556945502798816555187524677304925560089101919009521697474350748638743641202653688520417740252486098670158132284289295553734279242028954429351366814490925089156034502375684651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f2422bd429e2a01a33e48a55ff48720dedcd709e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingtimaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afb442fd400000403004830460221009e27de1c27c580cc3ced9ad99a262a57aed82e084c045100c6a9a94d6b84069102210092c943464061f632be3c51c16cdd3b134e69c8d296a21560b4166117392b4a4500760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afb442ff9000004030047304502204a9e6b8fd872e0059b00fe3b7ac110e420dea6bd00c8b098a95cd0bfce61d4960221009a783694f79df66c73207c21efee865c7a5995146e89897bc923f37fcfe2616e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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