www.mysporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:9a:49:ed:d5:26:47:11:af:97:3b:d9:a4:6f:98:c6:f8:df was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mysporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:9a:49:ed:d5:26:47:11:af:97:3b:d9:a4:6f:98:c6:f8:df
Serial Number (int): 400950896774099192142713226791783517059295
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 22:9f:bf:ca:5a:f5:c7:bf:ee:0c:de:84:31:2f:8a:7d:d8:90:51:35
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 10:bc:a9:0d:53:04:e2:b2:76:ad:e4:01:57:54:46:04:5c:04:07:f3
Fingerprint (sha256): b1:07:97:9f:95:50:ad:12:23:ab:df:4b:a5:b2:4c:57:c3:b4:66:c5:71:31:5a:eb:9f:7c:a8:0b:28:a9:9c:61

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mysporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mysporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

patumahoerugby.co.nz
www.ahiparagamefishclub.co.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.burnsiderugby.co.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.hbcricket.co.nz
www.hbsfc.co.nz
www.huttaikido.org.nz
www.juniorcricket.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughvolleyball.org.nz
www.mpcricket.org.nz
www.mysporty.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpca.org
www.nzpowerlifting.co.nz
www.patumahoerugby.co.nz
www.phcc.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.silverdalerugby.co.nz
www.sissnetball.co.nz
www.sportotago.co.nz
www.squashauckland.org.nz
www.tgahockey.co.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.waiopehu.ac.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name mysporty.co.nz

(limited to 100 certificates)
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz

Certificate

The complete raw certificate details for www.mysporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJezCCCGOgAwIBAgISBJpJ7dUmRxGvlzvZpG+YxvjfMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAzMTIwMTEyNDlaFw0yNDA2MTAwMTEyNDhaMB0xGzAZBgNVBAMT
End3dy5teXNwb3J0eS5jby5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKzPzf/4Wt5MzhA9pEYQ4L0Bvxi+FIsQQLNHPLcwpH1142nDb1zM1gKLkynL
lkPa09QR6Jy5JcZemPaFYtgSg7fy5AtLeIyjHNshD/EnVxCa+Q+PTHQgOo4Qhp8X
wPG/Oaz1LkGDzC6KXJGPG1slKW2Wo0VFccCKIBVbncLtSRKuGdBq+27fCLivSZoF
CWWZoA1oNwobMASt6I4o/FRLLjXfIsDF3cXQPX1mEePL72IjGPgWH+lt0uhV2uGt
JkGgoFOaHTZtUJxlB3to15ADeqXUDZihupE6bAQLpIOhvYUtCaGiZbWvQpVFbiVe
t5hKjmnhIty/zPArFtpggi0qLQECAwEAAaOCBp4wggaaMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUIp+/ylr1x7/uDN6EMS+KfdiQUTUwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggSmBgNVHREEggSdMIIEmYIUcGF0dW1haG9lcnVnYnkuY28ubnqCHXd3
dy5haGlwYXJhZ2FtZWZpc2hjbHViLmNvLm56giF3d3cuYXNobGV5Zm9yZXN0cmFs
bHlzcHJpbnQuY28ubnqCF3d3dy5hdWNrbGFuZHJ1Z2J5LmNvLm56ghx3d3cuYXVj
a2xhbmRzcXVhc2hqdW5pb3JzLm56ghJ3d3cuYm9wdG91Y2guY28ubnqCGXd3dy5i
b3dsc2hhd2tlc2JheS5vcmcubnqCFXd3dy5ib3dsc3dhaWthbmFlLmNvbYIXd3d3
LmJ1cm5zaWRlcnVnYnkuY28ubnqCDnd3dy5jc2Eub3JnLm56gg13d3cuZWFrZmMu
b3JnghZ3d3cuZWNic29mdGJhbGwub3JnLm56ghN3d3cuaGJjcmlja2V0LmNvLm56
gg93d3cuaGJzZmMuY28ubnqCFXd3dy5odXR0YWlraWRvLm9yZy5ueoIXd3d3Lmp1
bmlvcmNyaWNrZXQuY28ubnqCFnd3dy5rYXJha2F0ZW5uaXMuY28ubnqCG3d3dy5r
ZW5zaW5ndG9uZml0bmVzcy5jby5ueoIWd3d3Lm1hcmtldGdyb3VuZC5jby5ueoIe
d3d3Lm1hcmxib3JvdWdoLWNhci1jbHViLmNvLm56giB3d3cubWFybGJvcm91Z2h2
b2xsZXliYWxsLm9yZy5ueoIUd3d3Lm1wY3JpY2tldC5vcmcubnqCEnd3dy5teXNw
b3J0eS5jby5ueoIed3d3Lm5lbHNvbmZhcm1lcnNtYXJrZXQub3JnLm56ghl3d3cu
bmVsc29uc29mdGJhbGwub3JnLm56ghp3d3cubmV0YmFsbHdhaXJhcmFwYS5jby5u
eoIed3d3Lm5vcnRoaGFyYm91cnNvZnRiYWxsLmNvLm56ghB3d3cubnNrZmMub3Jn
Lm56gg13d3cubnpwY2Eub3Jnghh3d3cubnpwb3dlcmxpZnRpbmcuY28ubnqCGHd3
dy5wYXR1bWFob2VydWdieS5jby5ueoIOd3d3LnBoY2MuY28ubnqCFnd3dy5wbGF5
c29mdGJhbGwuY28ubnqCFHd3dy5wb25zb25ieWJvd2xzLm56ghV3d3cucG9ycml0
dC5zY2hvb2wubnqCEHd3dy5yYXRlYy5vcmcubnqCC3d3dy5yYnBjLm56ghN3d3cu
cml2ZXJyb2FkLmNvLm56ghl3d3cuc2lsdmVyZGFsZXJ1Z2J5LmNvLm56ghV3d3cu
c2lzc25ldGJhbGwuY28ubnqCFHd3dy5zcG9ydG90YWdvLmNvLm56ghl3d3cuc3F1
YXNoYXVja2xhbmQub3JnLm56ghN3d3cudGdhaG9ja2V5LmNvLm56ghV3d3cudG90
YWx0b3VjaC5vcmcubnqCG3d3dy50b3VjaG5vcnRoaGFyYm91ci5jby5ueoIOd3d3
LnR1a2kuY28ubnqCFXd3dy50d3lmb3JkLnNjaG9vbC5ueoISd3d3LndhaW9wZWh1
LmFjLm56gg93d3cud21jYy5uZXQubnqCFnd3dy53b29kZW5kcnVnYnkuY28ubnow
EwYDVR0gBAwwCjAIBgZngQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY4wbxPfAAAEAwBHMEUC
IFxAARcfygJfFmHql0v4F2OxL9QOv9nMTNxZ3jaO1BASAiEAqCHoykzueVrnreFn
O6kmm8zDTuFc6BvnQV2yDBaipw4AdQCi4r/WHt4vLweg1k5tN6fcZUOwxrUuotq3
iviabfUX2AAAAY4wbxPlAAAEAwBGMEQCIHMs96vV2IWZDceNEwHXMZyPt8mdTMBG
LOJzQ1yVPTeCAiA6T7M6m5SsxbpsO3QWdvm7+wBvGlp9wD8SXSSta57McjANBgkq
hkiG9w0BAQsFAAOCAQEADXRUkIC4KI1PWusZQU9sMhd7qr8So2V/TmYmYtF/WWnX
JLMLIdFaq16vC2VsxYxsQReVm+Qho8LG8M43HY+3wEKH3XkHC1m3JUBDQi0cqSRF
pI58LpptL06PFOr47NGEuMW1NtfdMmHTZPN6byghYttlsPq0gyJxFbfM1o9D7UCa
OgomudlmxInapmVhJG570lJvu5Qe1kEXBmAMqGl3RaMJ791O8607gvStKFgwb5O3
Oe0LsXqRiMk0qglSmOt9cZuirpyahG/sgtg8pyDOydSfejgKuQIfzs8jtevFYdcA
G/2YQhJ/lHYxaKAuPyjKcx+5zsdX1qK6HVLteOhKyA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM/N//ha3kzOED2kRhDg
vQG/GL4UixBAs0c8tzCkfXXjacNvXMzWAouTKcuWQ9rT1BHonLklxl6Y9oVi2BKD
t/LkC0t4jKMc2yEP8SdXEJr5D49MdCA6jhCGnxfA8b85rPUuQYPMLopckY8bWyUp
bZajRUVxwIogFVudwu1JEq4Z0Gr7bt8IuK9JmgUJZZmgDWg3ChswBK3ojij8VEsu
Nd8iwMXdxdA9fWYR48vvYiMY+BYf6W3S6FXa4a0mQaCgU5odNm1QnGUHe2jXkAN6
pdQNmKG6kTpsBAukg6G9hS0JoaJlta9ClUVuJV63mEqOaeEi3L/M8CsW2mCCLSot
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 400950896774099192142713226791783517059295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 01:12:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 01:12:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mysporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21815460764538947137903180676347669692531302584773662177876638161321777831563686081345578178007925758995297361595676716552833181847133488326083097116283537350204214902241651086199696561396940536839065199152932361008714497177015440005262356458060563660245616665490525550972993907942118732671280993551333676861806749043441749730662042453822787931564955920143098602787132205943841089827092058210384154002870980431232800481274440043397920184400256174125131562993800969232503348563673303231392770258686429562510726578545638240532794978278976909204110787346264411693426459913813945685744824155260001124041356438676745891073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							229fbfca5af5c7bfee0cde84312f8a7dd8905135
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1181 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patumahoerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e306f13df000004030047304502205c4001171fca025f1661ea974bf81763b12fd40ebfd9cc4cdc59de368ed41012022100a821e8ca4cee795ae7ade1673ba9269bccc34ee15ce81be7415db20c16a2a70e007500a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e306f13e500000403004630440220732cf7abd5d885990dc78d1301d7319c8fb7c99d4cc0462ce273435c953d378202203a4fb33a9b94acc5ba6c3b741676f9bbfb006f1a5a7dc03f125d24ad6b9ecc72
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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