New Zealand Lotteries Commission

- New Zealand Lotteries Commission -

Issued by DigiCert Verified Mark RSA4096 SHA256 2021 CA1

About this certificate

This digital certificate with serial number 0d:0b:37:7f:3a:5e:10:a5:56:2c:d5:b2:0c:c6:66:42 was issued on by DigiCert, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.

New Zealand Lotteries Commission

Company registration number: Government Entity
Organization: New Zealand Lotteries Commission
Address: 73 Remuera Road
State / Province: Auckland
Locality: Remuera
Country: NZ

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:0b:37:7f:3a:5e:10:a5:56:2c:d5:b2:0c:c6:66:42
Serial Number (int): 17338204823216477809575378873959736898
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 92:47:a0:c8:49:19:7e:b2:37:52:f6:be:33:d7:be:82:94:15:07:a4
AuthorityKeyId: be:9f:bd:8d:57:6d:95:b5:ad:63:c3:97:4e:ab:a8:84:5d:3a:07:f5

Fingerprint (sha1): ec:ed:50:0e:bf:a0:03:27:e9:9c:ad:15:1e:10:c2:21:41:9c:e8:6c
Fingerprint (sha256): b6:45:5b:1c:cf:53:79:80:10:05:78:01:9d:11:f9:e8:af:20:75:15:0a:1c:da:3f:4b:59:b3:60:cb:eb:11:cf

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt

Revocation information

CRL Distribution Point: http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl

Check the revocation status for certificate New Zealand Lotteries Commission

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for New Zealand Lotteries Commission

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Extended Key Usages

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mylotto.co.nz
e.lottonz.co.nz
lottonz.co.nz

Other certificates including the domain name

(limited to 100 certificates)

Certificate

The complete raw certificate details for New Zealand Lotteries Commission in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINHzCCCwegAwIBAgIQDQs3fzpeEKVWLNWyDMZmQjANBgkqhkiG9w0BAQsFADBf
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNzA1BgNVBAMT
LkRpZ2lDZXJ0IFZlcmlmaWVkIE1hcmsgUlNBNDA5NiBTSEEyNTYgMjAyMSBDQTEw
HhcNMjQwMzAxMDAwMDAwWhcNMjQxMjE3MjM1OTU5WjCCATwxEzARBgsrBgEEAYI3
PAIBAxMCTloxGjAYBgNVBA8TEUdvdmVybm1lbnQgRW50aXR5MRowGAYDVQQFExFH
b3Zlcm5tZW50IEVudGl0eTELMAkGA1UEBhMCTloxETAPBgNVBAgTCEF1Y2tsYW5k
MRAwDgYDVQQHEwdSZW11ZXJhMRgwFgYDVQQJEw83MyBSZW11ZXJhIFJvYWQxKTAn
BgNVBAoTIE5ldyBaZWFsYW5kIExvdHRlcmllcyBDb21taXNzaW9uMSkwJwYDVQQD
EyBOZXcgWmVhbGFuZCBMb3R0ZXJpZXMgQ29tbWlzc2lvbjEfMB0GCisGAQQBg55f
AQ0TD1JlZ2lzdGVyZWQgTWFyazESMBAGCisGAQQBg55fAQMTAk5aMRYwFAYKKwYB
BAGDnl8BBBMGOTc5NDA0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
mE77sV+AQQJXDOilng3EIGrlEv+PrT4ib/aSO53YsOQeHKNnMD9rts5lbZObpvQV
3d6qZzUnto8kRl4DwAlskc/ZVnU5Mu6lr8yhOzf9RyIdq6LinAlqU/aSxjTOkA8M
zXjuDyR80BUpQQlQEKQ10VL0s5aIl68P90K6bj7NWcgMUfaRvQojQxnPlc871n6D
ZIYiluKGsZhg1S7WtDP9D/4VhN8DMT2+05kXed0d8QsykhDcEHCqs9VOcpi+yjDR
zJlp05iXm9THP/nJmxl3vDsUlvj4dZ6YbKnBJx/s6J062IsDlLgcyr9Bne+8tROQ
ONPSQk9hUqpZUQeT2rdWBwIDAQABo4IH9jCCB/IwHwYDVR0jBBgwFoAUvp+9jVdt
lbWtY8OXTquohF06B/UwHQYDVR0OBBYEFJJHoMhJGX6yN1L2vjPXvoKUFQekMDgG
A1UdEQQxMC+CDW15bG90dG8uY28ubnqCD2UubG90dG9uei5jby5ueoINbG90dG9u
ei5jby5uejBQBgNVHSAESTBHMDcGCmCGSAGG/WwAAgUwKTAnBggrBgEFBQcCARYb
aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAwGCisGAQQBg55fAQEwEwYDVR0l
BAwwCgYIKwYBBQUHAx8wgaUGA1UdHwSBnTCBmjBLoEmgR4ZFaHR0cDovL2NybDMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VmVyaWZpZWRNYXJrUlNBNDA5NlNIQTI1NjIw
MjFDQTEuY3JsMEugSaBHhkVodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNl
cnRWZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcmwwZAYIKwYBBQUH
AQEEWDBWMFQGCCsGAQUFBzAChkhodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20v
RGlnaUNlcnRWZXJpZmllZE1hcmtSU0E0MDk2U0hBMjU2MjAyMUNBMS5jcnQwDAYD
VR0TAQH/BAIwADCCBWQGCCsGAQUFBwEMBIIFVjCCBVKiggVOoIIFSjCCBUYwggVC
MIIFPhYNaW1hZ2Uvc3ZnK3htbDAjMCEwCQYFKw4DAhoFAAQUp5yCRj5q3bCEq594
dIvY5QSe2ZUwggUGFoIFAmRhdGE6aW1hZ2Uvc3ZnK3htbDtiYXNlNjQsSDRzSUFB
QUFBQUFBQ3BWV1RXL2JPQlM4NzY4UTFDdjV6TytQSWc3UUZnbDY4QzU2Mk5QZXZJ
N3FDR1d0d0JicXBMOSs1OUZPYkFWcGs4MGhFaW5PdkpuSG9lU0wzWTkxYy8rOWJI
Yno5blljNzk3UFp2djludmFXaHUxNlpwUlNNNnhvRDB2ZTM1ZCs4KzJsaFRyblBL
dFAyK1pIdDkzMXcyYmVhaklZOWQzKzQzQS9iMVdqR3BjMHBYeTh0TTIveTEzM1pU
dDg3VXMzYjhkKzh5RHZkdTNsSDAxek1mWmo2UzRYd3pnT3pWL2R2dm1uVzVibDV1
WmlkbmpBUzdiZGFtd2U1cTFVcEZGbjM5K010L1Aya2ZxMjY5ZTM0Mm04RzdmRHQw
NE9kOHRWUHdLbG5xYSs5Mk8zTFQwdVVIeWFQdklwTXY1eGJ0Nit1NjUvYlFQSlpk
NXVoazNYenFxYWRkUGZ6TnUvdS91eEd1Q1p3eFYzZDBONVdBK2I1bTdvTnlQNkhB
TkZLN1R5NUh4amNBbFJPSy9JTnM1bVNsN29FTWhvUUI4THZidkswYWlQaDFwVGR1
WmZqcmNOcXY5cGpBTk9tQXpLSWcxRkxUV1lTaWFWcFNadkNrb0thOGk0SWoybEtC
VGx0REJhVS9hQXBXSW9RSm1uV0NTREJFQzJGdUgxVGg2Z29FeWdVMkZ4WG5BeStQ
bWsvUHJxK3NOVlBDbWY2TFdCUEJESmswMEZsRGJKUkNZV0V5Z0Y2Y2psb2tpeFRL
ZWhTQmdvTTBYRFdZSTk3UXBEUklWSUUwa2w0VTZDR1NrckVsYXdIbGpZQmpqQUt6
THorVkQrMTFJdlp1dmY5MXQ3UkJ4a0tsQ0dGdTRvWklWUUVnVW44REM0WXFvclM1
NmJhNDNRRnRhS3RKR1I2S1JkVEZqTzFCeWk5bUxqZEE3a25EQU92SEdGbWhZN2JT
bEdnU1lFdG1xUm9rdzVjMXU4WHVHaDB0eXl4RDMwUVhBekJKNmx3T3Q4NVY4eGo2
ZzhFbHJxVXV0azVSR1Y1eE5IeFVaaGdvZHlJRk9sOFJIcnhFVFV6d1pwckdFMnNK
clRTbW9rS0FjUW00aHNhZkJxL3AvUWxFTjE3SGROWk5LWVRCWVN2WldSNzdEU3I3
UmdQTGNzQ2VEcnJQYllmS3RYakpTTXhEQVp5VWpCU0s3aDhtS2k1RzBkTmo1UTRB
N2dZamo4NkxEVk9MZEYxczBGcitjalpndzMzaVRlY284RU84ZXpEdTRjQmMyWmNC
NFRQaGVlRlR4N3NBdUFzVFh5aFZtNDdaemlWUHZLczF4U0hFdFdHc0UwaTRtd04z
cEpzQThFam13NnMrS3FGWCswb25nejBFSSszdWc3aEdwVHJmQ3REYytjK09wRS8w
OG5idXJrVE5iYmpGaVZ5U0Y5ZU5HRThIcnN6YXV4MTArNS8zM3NMU3B5c2dPZllJ
dFFvYVN4aVp3VkUwMkx5UWhud0RwRENZd2dVL0VZODlOQlNNOFB3dWtNbUJmT2dN
dTdGOUp2WGtsL3JicVlDUGwxdDg5ZmVjOC9XOWJ6SjBUb0dNbVp4c0krM3ZZNjQ3
UUhqQlRUNjJncHgvTVBsLzJnUDRXbmQrcVJ2bDR1K0lmRjVYOEZsdzdyZ0FnQUFB
PT0wgYoGCisGAQQB1nkCBAIEfAR6AHgAdgBVWVOuMJYAgGzS61IIpsmekxgorBBW
tEIcVTYVTF91rAAAAY342x3XAAAEAwBHMEUCID9HP1f5Zl2QO/8b7DAcz/jL9EqJ
6lNMel18lrGp7utIAiEA91q42ooU3Bs9AIBjJU2DhxSBdwxdVXnLbhsYG9nfolcw
DQYJKoZIhvcNAQELBQADggIBAAVRyGQjUCxGcNZYaopAV2g2VgHjGrA1+79P2xzU
9/Tc9FvDYn2keXXicmyUneE/cDqVjv7RYqGe6e4kzL06zIwRACsca4ixhS++Dvyu
2ljt18u5Fq0xdQOF7sihP3cCs6EQx+2PMGC/bCDQbgPpaXcxftUZnWC16vLWmkyU
81LUTlm7X+hOtbBYzo9GSwoZ6ULvMfgiv+E4ruTqHMwHLAybl4J8SNakQbabUkGT
A3DTqBLRjhJiW+femDKNMMARLJboAVm4zkTcgpl6jJRuJOJ8F8W8XcsiQ/ugvJis
loU8pJkM4PwOaP/2b/JPWuILI1yXm3+JEO144RbIPXM3uDeqQsAdW/2rTYEy1NiC
XFmKqY+JOa/rvjw7WoIfmC0Q4XPlkI87x1grGokMlMtPH+t6UtnxDclI88lj75aj
uCzyZNWYF2U+1S5gIw8NKXASTc60yOs2npFCzaYD8Oxwu1C0cPTXRgWW0xix97ZS
AnRZH9q6oqOKmK1k28RL+evNa5X9bHceFELqkPivZntG4I8Bu5viJ1XMbw4zrZWq
rsoSfl9mt2yW0VfPpKZaFQDr/OrHACK0Brh+gULwvEeXjPHSh+7eRnLVOdAsqiWF
qL1Abs5WFTwVumAPTTE9M0EbXI1q4RIfVaA1o5eGitknJlOdgoGtCwGRn/yDm+F4
gJJQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmE77sV+AQQJXDOilng3E
IGrlEv+PrT4ib/aSO53YsOQeHKNnMD9rts5lbZObpvQV3d6qZzUnto8kRl4DwAls
kc/ZVnU5Mu6lr8yhOzf9RyIdq6LinAlqU/aSxjTOkA8MzXjuDyR80BUpQQlQEKQ1
0VL0s5aIl68P90K6bj7NWcgMUfaRvQojQxnPlc871n6DZIYiluKGsZhg1S7WtDP9
D/4VhN8DMT2+05kXed0d8QsykhDcEHCqs9VOcpi+yjDRzJlp05iXm9THP/nJmxl3
vDsUlvj4dZ6YbKnBJx/s6J062IsDlLgcyr9Bne+8tROQONPSQk9hUqpZUQeT2rdW
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17338204823216477809575378873959736898
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Verified Mark RSA4096 SHA256 2021 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Remuera'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '73 Remuera Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Zealand Lotteries Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Zealand Lotteries Commission'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.13
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Registered Mark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.4
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '979404'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19227170410169584339489113308017101580818465334265300182084968871530833186905488528714653692133290450122151552312345753364208457194687448415413478261391614811374521306102587198509718012060175094942283661543238104867916201704974048458268797319897702817693598706587940212229159692821982619898355658741895149097769319027120420143839148991941128825348042092949430162765295078127000129434913911110502784639414457151652088221347145648707600520433182378132030099219276517236603154359202250153221392004338288571602989926712690949847975045073013672102130123403248777352142469654262094651913822630677378526982444420167156323847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName be9fbd8d576d95b5ad63c3974eaba8845d3a07f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9247a0c849197eb23752f6be33d7be82941507a4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylotto.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.lottonz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lottonz.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.0.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.53087.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.31
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertVerifiedMarkRSA4096SHA2562021CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/svg+xml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															a79c82463e6addb084ab9f78748bd8e5049ed995
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'data:image/svg+xml;base64,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'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:0|false] reserved for BER 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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