sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:5b:18:8b:89:00:4a:e9:95:9d:7d:65:72:ed:75:c0:a0:6d was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5b:18:8b:89:00:4a:e9:95:9d:7d:65:72:ed:75:c0:a0:6d
Serial Number (int): 292335179164961614414288223238523283611757
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 61:4b:ba:41:b5:ec:b8:ce:ee:39:96:a7:13:f4:da:92:3e:5a:53:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 1c:24:d8:6b:81:84:86:5c:f1:98:49:1c:6b:6f:87:09:e4:a4:74:4d
Fingerprint (sha256): b1:77:75:d1:eb:c5:4b:03:2d:8f:ed:f7:4d:12:51:de:96:f0:ea:c4:f9:23:09:fc:8d:98:30:30:00:5e:ae:d6

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arataki.school.nz
aucklandnetball.co.nz
beachlandsspeedway.co.nz
birkenhead.school.nz
boprugby.co.nz
brucepulmanpark.com
cityrovers.co.nz
clevedongamefishingclub.co.nz
cliftonmarineclub.co.nz
csfc.co.nz
dunedintriclub.co.nz
frimley.school.nz
glenedenunited.co.nz
glenfieldsoftballclub.co.nz
hibiscuscoast.basketball
huntlyinternationalspeedway.co.nz
iona.school.nz
kaiparabasketball.com
karatenz.co.nz
kartsportrotorua.nz
mknetball.co.nz
motuekanetball.co.nz
myrugby.co.nz
netballhuttvalley.co.nz
netballwellington.co.nz
nghs.school.nz
northcanterbury.basketball
northernunitedfootball.co.nz
northernunitedsports.co.nz
ohopefootball.org.nz
oldboys.co.nz
onemanaslsc.org.nz
otagocricket.co.nz
otagocricket.nz
otagosoftball.com
otagotouch.co.nz
papnorth.school.nz
poriruaindoorsports.co.nz
prebbletonvillagesquare.co.nz
rockynookbowls.nz
rotoruaspeedway.co.nz
runtimaru.co.nz
sportschaplaincy.co.nz
sporty.co.nz
squashwaikato.co.nz
tairuarsc.co.nz
teatatusoccer.org.nz
tetauihubaseball.nz
thelongroom.co.nz
workingequitationkaikoheboi.co.nz
wtrugby.com

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKLtbdDcwaJkbdPjXxuD
aUxXdbDF6kVE+BmRU9mE+SNH+C+PyCodtBdF5VrgiM3ewiUuie/DF1BD4MZIDZYx
hFp2TMn1OeL9l7y311wR1N6N7Jd7wTGlEFwWCGXGggq7ZvQ0uHW+N1p0hwH//9K3
+aJYSmaDEI+BNgONdJANeyualcCIF8/G5dxr3XSTY+bl1O2Dt/S70UGp1M77KIHW
sG2reNNq+FN1cXARcZe7E6J9Dr/VgekJ7VJEn6OUem2lgUklkqipsAdWzPs6XDt2
jiGzS/kKw3U0Yf1LGK2p7JCKltB68dSGVGNWmRpqHE4MfQHC6vCbvKiPbhvKc4b5
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292335179164961614414288223238523283611757
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-10 19:57:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-09 19:57:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24823050296755271415106406585249553285147239019450419395152515019896392090227786323943088076916833094531955927205827318676023853214125483244437385658982281766744289818420369228450286490134091600870171044314713642415281793246060804163365157648922284645405372468828055434061315202047576257813194926931823666978004960528707253303106135979661785897227854575743077760274816063998281687937610850577873214094081276513094599003765471372248436560522206768532075760871002889714765210236251772785420416170703025247876302002300315227490822326869902415770205496105789513190195026307791837378246083880672364381182113670781393631677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							614bba41b5ecb8ceee3996a713f4da923e5a535a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arataki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachlandsspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkenhead.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boprugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brucepulmanpark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cityrovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedongamefishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftonmarineclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedintriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frimley.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenedenunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hibiscuscoast.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huntlyinternationalspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iona.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiparabasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karatenz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsportrotorua.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mknetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekanetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballhuttvalley.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northernunitedsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ohopefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oldboys.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onemanaslsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagosoftball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papnorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poriruaindoorsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonvillagesquare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rockynookbowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaspeedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runtimaru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportschaplaincy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'squashwaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tairuarsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teatatusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tetauihubaseball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thelongroom.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingequitationkaikoheboi.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wtrugby.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cf52a9a7900000403004830460221008f7de0c4b3d3a33a344c714d3d6ee43b551f9a0fa79bc2da000ceba41109a71e022100c0985c04cda5689a99be6086ad364c53cf7ce18d4a352583d6e549ca6aaace77007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cf52a9a840000040300473045022100d318aea9f1791dafec60f79999ce0b2cd79d4001b605f2c993aa439d2834304002203e3f904fa3c29426e4ad81e54c25760cc033b62b9f367ce5cfdd1fb5fa75935e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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