canterburybaseball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1b:35:56:d8:29:fc:5e:1d:e8:50:be:9f:d4:13:05:81:53 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterburybaseball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1b:35:56:d8:29:fc:5e:1d:e8:50:be:9f:d4:13:05:81:53
Serial Number (int): 270595381707779446044404531343359683690835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:2e:8d:e7:84:80:39:e2:fe:6c:5a:6e:a0:28:3c:bb:cc:a2:03:3e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 50:55:7e:e8:7d:8f:e1:75:6b:ea:89:bc:7c:f2:af:ec:60:aa:ee:36
Fingerprint (sha256): b6:8a:2d:aa:76:a6:7b:6a:85:55:05:7c:ef:b1:68:bf:9f:da:0a:3a:ce:94:e3:bd:46:ae:3b:f3:4b:d3:3f:aa

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterburybaseball.co.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterburybaseball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acwpa.co.nz
ashleyrugby.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canoeslalombop.co.nz
canterburybaseball.co.nz
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
devonportsquash.org.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastingsintermediate.school.nz
heet.net.nz
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
martinboroughsquash.co.nz
martinboroughtennisclub.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballtaranaki.org.nz
nzpca.org
oacnz.org
ophc.co.nz
orfu.co.nz
otagotouch.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
pioneerbasketballclub.co.nz
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rangi.school.nz
rollestonrugby.co.nz
rosmini.school.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
willowpark.school.nz
wmsc.org.nz

Other certificates including the domain name canterburybaseball.co.nz

(limited to 100 certificates)
www.diamondsportsnz.co.nz
meeanee.school.nz
sporty.co.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
manurewamets.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz

Certificate

The complete raw certificate details for canterburybaseball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5xxTYDvyQwuHJLZtT7Y
GDgiHk9F1e5NI/ZU1cdNVWZo8obcqLRn6rUiBsWxFRRb1+ucSBekwwSncsIzyAKc
3OrXdrjTIdT9g5UROECXs3EdSVzM7bU8rNOK8YykWPDUSuBAmNbZYjOBMSY+fkvV
3bblhG7U1GYpsOthSQ3NJr+KHaOd/OHzA04fnjnHdeCX2+L7zdta2CEoM2eRcrkh
4gsttveJ7GtCSz+UkxYaxbRRoAZjje6HC+s42ppJQt4llMhcF5P+0GqgV5yHJVXE
voampyqA1Pq2ifQUIf7i/gibAyCWAlUBXMn5atnjkr0WUok6yM+4ztzaXOy6ExlW
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 270595381707779446044404531343359683690835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 03:18:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 03:18:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterburybaseball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17119315886208689686636314104588381282473206285714990156829610430152478419393517164433197162209942422235648772907200172940174187600567916732847304959712855950205331301684942708942009935604518701002992207663608049299796509103646510969067898170575815769674756623162431860109410872022216947139542046212331536360393837097553304164951763655416166240296800347459940854130439760818784223755266240515396679774940864075763495247657393455521299949744526427163095732312240755877190319866734334706165543493012614397814824953261111747160940679041956686938863917183903842971708829509214695762771912402999209271321344795474375824901
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c2e8de7848039e2fe6c5a6ea0283cbbcca2033e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1803 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c4119d5800000040300473045022048e01884ecf1717654dfb2037216a3117ed888e33dbca98bd20c9930243b35e202210085db6019a009596a17b509a6bdc2fd708855ce5577bc9f8b37698213431a9805007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c4119d791000004030046304402207ee0413075f10b70d4db696edb14c10d21b9d170afc7cf99f73043632b35ab6b022001103b76a3ecc2d9b9945ba2103676691c4d5d189baee541be1e0394254bb92f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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