eden.rugby

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:63:bb:0f:5d:06:ba:d7:15:96:63:60:16:b8:1b:a4:9c:ef was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eden.rugby

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:63:bb:0f:5d:06:ba:d7:15:96:63:60:16:b8:1b:a4:9c:ef
Serial Number (int): 295273457526915591460906015801477901360367
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:14:82:7f:17:54:f2:06:38:a1:ac:c1:a0:34:38:4b:2a:a6:71:de
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): de:41:10:5a:6c:b2:e1:68:f5:81:62:27:1e:f5:ae:64:78:0b:fe:61
Fingerprint (sha256): b3:73:11:0f:c0:b0:98:4c:27:e7:f1:b9:1f:ce:8a:5a:23:ce:70:fd:55:af:66:52:40:ae:e3:46:9c:63:1b:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate eden.rugby

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eden.rugby

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
aurfc.co.nz
belfastrugby.co.nz
bopgolf.co.nz
canterburywaterpolo.org.nz
cdcricket.co.nz
centralcitybaseball.org.nz
cliftoncricket.nz
cliftoncricketclub.co.nz
collegesportsportal.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
eden.rugby
edenrugby.co.nz
fastpitch.co.nz
flaxmillbaymotel.co.nz
goodmanrural.co.nz
greenislandbadmintonclub.net.nz
greertonmaristnz.org.nz
halswellunitedfc.co.nz
hampsteadclub.co.nz
havelocknorthbridgeclub.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbreds.nz
hbrfu.co.nz
hbru.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mesoball.co.nz
mgcarclubcanterbury.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
nelsonnetball.co.nz
netballsouthcanterbury.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzsssc.co.nz
nzsssc.org.nz
ojcc.org.nz
papakurarugbyleague.co.nz
papatoetoenorth.school.nz
photocard.co.nz
playsoftball.org.nz
pngolf.co.nz
pointrugby.co.nz
rangatiragolf.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
southbridgerugby.com
southlandschoolsport.org.nz
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sportslink.org.nz
sportspark.co.nz
sportspay.co.nz
sportsportal.co.nz
sportyapp.co.nz
supersixes.co.nz
tasmanvolley.org.nz
totaltouch.org.nz
tuki.co.nz
turbotouch.co.nz
turbotouch.org.nz
waikatogolf.co.nz
waikatogolf.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name eden.rugby

(limited to 100 certificates)
www.sportycrm.com
www.sportsground.com
sportycrm.com
eden.rugby
sporty.org.nz
hbnetball.co.nz
www.sportsground.com
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
www.eden.rugby
sporty.org.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for eden.rugby in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizaXWy530neDSsBF53yZ
M2oKWlvV5NgU5pX7ergysxDaH2XB3dBPRxuzLmxXW8cfkCtPujdcnTWgbvIX8eM3
n2HVJg1EyeTZl0f2XDgBHA+cR2XH8ai9ejnhr4YiFvHLrYXhSClTYwRRzEQD7Epg
uDL0+JhXN24E4+ymVVWVXMHAJZ3oRhpeJ9dbR86qMo+7dPlG78TneYhgWK5x9MJq
GuVzCMXk5BPiCsX5WLgZSCtgAGqwEyWC0ln0JAKuQM8nVePh2fpcwTIAiv5DnaeR
ZQo4A5TSYJyp9MZZvqXfWK+lNz/TIGoX4QU6tm6+bUFTA28PlQ2yKpcdi13NDxGP
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295273457526915591460906015801477901360367
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 09:54:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 09:54:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eden.rugby'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17574044331614880653782055476856583230830566681749716404676669588409008036196529783150608820815067766073497463753473678850988103907561831084511029071566693231863875863859034266132481999056574556760783743050320438023649416658198222527998820219204704022873655127968717407222769483272926140254072863709999674108520764325159733791802843423778296559627262310586275463511648137314400449353886959186804303138479791394209089079331777599736267775882666513362615657839442673941213146891766428714532475150341614982032466380404838123554723169481417242907162913959757073327416782880581659785416797375654415150310062989618768350979
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c14827f1754f20638a1acc1a034384b2aa671de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1779 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papatoetoenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016ff0eff5c30000040300473045022100dd60e9ef0770f39715089e2808377780d73f2264e7ccc0fddd949929b22ead5e022043dab1c621f9847a452e62eb84cb08f5f2b3e8e0a1eccf91aa377b9c83e312db007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff0eff5c800000403004630440220686fdc5b03c682f51c25ff4541c5ef8b87be099cc29db6bff2c8e885e2b689d202204654b9807c21bad0e6e35f6ec87eefe5619d964a153fe9cf55e3d92d6c557b7f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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