loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:62:0e:43:43:0b:94:b0:71:ba:36:cd:cf:e0:24:4d:17:98 was issued on by Let's Encrypt.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:62:0e:43:43:0b:94:b0:71:ba:36:cd:cf:e0:24:4d:17:98
Serial Number (int): 294703488189202190336733268243899837388696
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:9d:4d:f0:5f:2d:14:d6:b9:c1:8a:53:b0:ed:71:ca:f5:95:7e:09
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): d6:f1:51:48:0e:59:9f:e6:37:3c:cd:78:96:12:c6:0c:87:63:e1:a8
Fingerprint (sha256): b0:2e:eb:cb:52:0c:fb:d9:78:6e:14:26:52:ee:4a:06:23:13:cf:30:55:fc:6c:e4:dc:6a:fc:6b:0a:b1:30:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
beta.jucy.com
beta.jucy.com.loadbalancer.nix.jucy.co.nz
beta.jucy.com.web1.nix.jucy.co.nz
content.jucy.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruize.co.nz
jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
jucycruize.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
opperations.jucy.co.nz
opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz
opperations.jucy.co.nz.web1.nix.jucy.co.nz
staging.jucy.com
staging.jucy.com.loadbalancer.nix.jucy.co.nz
staging.jucy.com.web1.nix.jucy.co.nz
web1.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruize.co.nz
www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruize.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)
loadbalancer.nix.jucy.co.nz
citrix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
sni.cloudflaressl.com
*.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
photos.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
mail.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
www.jucyrentals.de
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
uat.jucy.co.nz
jucy.co.nz
bookings.jucy.co.nz
sni.cloudflaressl.com
secure.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
bookings.jucy.co.nz
*.jucy.co.nz
secure.jucy.co.nz
jucy.co.nz
loadbalancer.nix.jucy.co.nz
uat.jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
uat.jucy.co.nz
loadbalancer.nix.jucy.co.nz
jucy.co.nz
photos.jucy.co.nz

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiSxXIVxfzCAHI2lM91X
Jw/gMbtltf8yI8XBObN9FfSPRV5Z3R3muuyN7+hsJ69opbl9XQOSWFbw/rAT5nkX
jAWfIi6vbhlrZN/K1699CLLLlYJLXtJfXlGMBFGc5NomAVrWOV5kOzNN9CARyCYb
r7AnB33SpZEnxuzH1nb151AZB3dIyEox6HrsZbPU2ZTdnmL4WiZNxY7ze5VfIn+t
kAx9jtfGSc2CuFTzG14fjoTVHBnCzaY1FM9OMBx/sSL4T9u8waNqM+6qeRwjHtiT
iPUFWXLXn8lcD1htNKqeyW25vOvZPwDRsiORq8IOJztY91Wo+HQLXMDINYO79vei
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 294703488189202190336733268243899837388696
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-14 13:07:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-12 13:07:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24508325066346302863859849958922147946264451243663067480027733434756589705433821050463469117484350910849601054742417025091869145394053929550798405189476773441795817214451749106540832636292662155475182573262670213078467478113584354144022215098548319126353356091393527560175583832348065697642553715221917734133931004321754931007834709372066110597761081161764597078445293263512160569574879502694187809199739895624868553740516637508076236458397525932263843730795995252051086634873118897173894325035503302349484671578459035707310888548137688104127478538045759608337222182222150686269978125479026115295517746843448130380471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c9d4df05f2d14d6b9c18a53b0ed71caf5957e09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2015 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077009420bc1e8ed58d6c88731f828b222c0dd1da4d5e6c4f943d61db4e2f584da2c20000017527704c4e00000403004830460221008f3de057e9b93b0076dac7023f6f5e8f9cf16b9b781e15da640040184484dcc002210095b623416b6dbd5acfd764927e27968985e084e59b5a523e72094e064e092f350076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017527704c90000004030047304502210080d207145b9b93ac1248faae41d5d99e0ef1c9cbe7b53350973b9b26dc11ff3302206d16fb5c7b47d349d0d31ca89bd6534007210323cdc6654553d345407cc1f2fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00695fc24d1c0e8b764025c0bf4bb536546aca88e46e6ee8bcc4641ae5bd37199f42e580e6da684ed9cd9bdd48691b53a952bc60b6d7f158c78ff073a744e2abab26b2d3d111e5b7e5ea220b2026f732fc35371b8bb861177a6dd7ef957ae78b273741a0a927d665c6a2a193ffcc3430b18bf36de98dfd97d7d38d6ded749d06c44db810a035a90cde0b49c525e0080062a55f67857e8eba205e3b5c1ec7c20cbcadf84a3c5e764491c20f2450cdc13641ef0443a55648898e6641af3cdde749d8f692a313df2264ea2fb6087e582af6472a3e6acd50a51fdc79583d6bcb30b54646df237ad7d5d284dd699fd463b84abd5e7fd41c96e6942c1b71b310fe11c802