www.schoolground.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:ba:13:04:bb:ab:6a:6a:0e:8a:4b:19:77:28:8c:3d:93 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.schoolground.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:ba:13:04:bb:ab:6a:6a:0e:8a:4b:19:77:28:8c:3d:93
Serial Number (int): 271452381592842617282824120986802229886355
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 98:12:5d:b5:e0:4d:2e:b0:ad:eb:f8:a4:59:4f:59:99:db:95:64:a4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:25:c0:01:e5:ac:6b:b6:8b:50:d9:39:5f:1a:d9:70:4c:2f:35:46
Fingerprint (sha256): b6:da:7e:c2:f6:57:a5:7e:36:2d:7a:97:54:4f:ee:d1:8b:eb:db:26:ac:5f:89:fd:58:49:3b:5c:7e:16:f6:59

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.schoolground.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.schoolground.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.athleticswanganui.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlssouthland.co.nz
www.bowlstaurangasouth.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.centralfootball.co.nz
www.centralfootball.org.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.diamondblacks.co.nz
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.footballsouth.co.nz
www.ghryc.co.nz
www.hbcc.org.nz
www.hcwaterpolo.co.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.kereru.school.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.lynnavon.org.nz
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.mysoftball.co.nz
www.nelsonnetball.co.nz
www.newzealandbaseball.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.ppnc.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.saintjosmatata.school.nz
www.schoolground.nz
www.softballauckland.org.nz
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandbmxclub.co.nz
www.southlandfestivalofrunning.co.nz
www.sportsground.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name schoolground.nz

(limited to 100 certificates)
oratiaunited.co.nz
maristinvercargill.co.nz
sporty.co.nz
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
www.schoolground.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.unimountafc.org.nz
www.greenhithefootball.org

Certificate

The complete raw certificate details for www.schoolground.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGPc/FrfLjlFfDx1SIsK
00JKl9QLkpr4tcoq1c50Wd5di0vt1CjvHAdJjLn77CLEl2P/quhEvPMBI3frfdDH
a4lJ3mcz8RWxrFl1FhHJE/vc93rr9lAdfMZuOVzw0CK06t90CJ2E0mDfeh3YwLIA
YsLIqrP6062/oufWzm8EN1IMjT76PnsDQqFTs7Ai9w9F+vSk4fRmlHmgq2zm3ZF/
ItkUAi6Yup/B3R8yexNDhfLmDlskIfWjNE5Zwr1jMIQQj1j5m5isuu7+zsf2DGGM
6LT+Dlue326XvYqC/JoaUPju7y5QFPb0AuFJRKEjS8LereeIWSzo/EegGqGndQrX
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271452381592842617282824120986802229886355
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 05:55:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 05:55:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.schoolground.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24791952165269868520744361632798976488884337559453659909687701096637198168565141789422540805953583140152841816923206145133324847091879956223283905012916574756456985543320958691262725805128819563505969085657137049799718816022321449856839594106589637020668653073509088252599274294007659747281248132213435265667784718395086855661439673426690781721172527345911859587406787409885939214760391575633813299347585038284359836206745772088656965953544108393320504802157123137084818205365636783570243978596831514987386545928717127811260287975573561732685602259283751595912924006601986103378249906062846827892402255919550212790269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:24|false]  
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2312 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170a45442da00000403004630440220147b5a8906b79e72afcc58536be1ea68fab772644094a85416b90719fc668e5702200c3dc724a292c007779ecfaf07fc4bf2cf9ede4a10ffc585096deefb8ba5163f00770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a454430c00000403004830460221009fa79656fa596065ca8c0cd394e83b558a87bc2c3079d40ddc4ada302426174e022100dd9194b84c1ba7156c4b7817b98eaa18f67d2c64683aeae2281989c66c262571
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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