aucklandmarist.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:55:2b:ea:f7:c6:10:ff:66:04:75:90:11:62:03:ed:69:7d was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aucklandmarist.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:55:2b:ea:f7:c6:10:ff:66:04:75:90:11:62:03:ed:69:7d
Serial Number (int): 290319235810291766664250196308073697339773
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 62:81:e4:99:0b:c3:99:64:05:12:cb:e2:7e:8c:2a:5c:fd:1a:f0:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6c:a8:a6:61:e5:56:e9:2e:c3:bc:92:5b:e9:f9:5b:b2:59:a0:d0:ba
Fingerprint (sha256): b2:72:f0:c3:d2:c1:2f:b5:c3:b7:3a:3f:c0:8f:6e:a7:fc:ab:ff:56:e3:d0:33:17:00:61:a2:ca:24:18:70:f0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate aucklandmarist.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aucklandmarist.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandmarist.co.nz
aucklandrugby.co.nz
aucklandtouch.co.nz
basketballtaranaki.co.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bsgevents.co.nz
bullernetball.co.nz
cometswimming.co.nz
cornwallparktouch.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
feildinglawnmowerracing.org.nz
generatenetwork.org
greertonponyclub.com
hamiltoncanoepolo.org.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
hockeysouthcanterbury.co.nz
hyc.org.nz
jcc.org.nz
juniorcricket.co.nz
karakacricket.co.nz
karakatennis.co.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlboroughparktennis.co.nz
marlboroughvolleyball.org.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtrbmx.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
netballwairarapa.co.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharbourtag.co.nz
nskfc.org.nz
nzpowerlifting.co.nz
nztua.com
osssa.org.nz
otahuhuroversrugbyleague.co.nz
parafednorthland.co.nz
ponekerugby.com
ponsonbybowls.nz
porritt.school.nz
prdf.co.nz
rbpc.nz
riverroad.co.nz
roosterssoftball.co.nz
schoolground.com
schoolsportaoraki.co.nz
scrfu.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
southlandolympicweightlifting.co.nz
sportotago.co.nz
sportsground.com
stewartalexander.co.nz
stheliersbowlingclub.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
taradale.co.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
torbaytennis.org.nz
touchnorthharbour.co.nz
tutangiora.nz
twyford.school.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
whangareitri.co.nz
wmcc.net.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name aucklandmarist.co.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
willowpark.school.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
sporty.co.nz
www.taranakihockey.org.nz
hastings-central.school.nz
ultrarunner.org.nz
southlandmtbclub.co.nz
www.oacnz.org
sporty.co.nz
sporty.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
aucklandmarist.co.nz
www.wmsc.org.nz
uniss.co.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
canterburybaseball.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for aucklandmarist.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFcLz17qBWSYIDOGKCpP
asfY+aXiPrzkxXd9flkqjwMG/epFvA2PQvgNMl2QRb3IFQUnhhDPN9BZyv5yeZ2l
XvRPRqA0OueIqd5RIqfiS5zQOzn9DhgPvSdmk6PnJck2JDX3SdsbYmuMp35+AXrN
Am8cItch/qlxNNQPAE+IW5t//oKqmQSHE3iVweppiFB0oE2HXLHqK8DkeNpkZlIT
Bd5ZJtooPnrsNNBunADWEp3B7YUrLAH2aMPVwUTwMDrdYmhh9njMUyX68MvyBYeS
9l8zE6FhQETFwcWamm1E4Eq9urmT00JzTJj+U/8b1MzkWnWeU/I7HTUEFQ4grmjx
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290319235810291766664250196308073697339773
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 16:58:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 16:58:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aucklandmarist.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18726193182948643575387868204828253813089779730315169804925843492112020919902033976523346005416120216644273814006769582985670365231516556121075805471624073417420157363198416956261414645648559894256332541272544794106541083923834133676569153580064906212523566815707224063486346284352193924433170491786867967534545608097903434326312155854017304916033046325167352171407127033103799945228196050700667818635932329264705229452626549561521890750210380721696789244346219707279137550579113587087367700935330706244922629649027032793324290488216718121067409709249007710921624381926389915541503122648764240236149186252827502637373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6281e4990bc399640512cbe27e8c2a5cfd1af032
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1867 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3b39883c0000040300483046022100fa52274f0dccc327c154bf80a1f60f76b44be83482655c473df3173fcce7fdbd022100aefe7853d4319b63aaea94b2614943d02245da2db69afb5bd546a97e681bde6800760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3b398a52000004030047304502205d669c6157192e4261a0e89c9e56032fa4bb4e624381958ff9058da486dd6ab302210095378eb69aea1a831db59aa081c626fed97bb67325f9b991b24cf33410f904de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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