www.wmsc.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:03:2a:46:ae:69:e9:5c:2f:0d:aa:66:da:be:c6:4b:05 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wmsc.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:03:2a:46:ae:69:e9:5c:2f:0d:aa:66:da:be:c6:4b:05
Serial Number (int): 272910665464635211482177378828732751825669
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:1a:20:96:7f:99:15:05:48:0a:7e:ec:36:88:5d:74:9e:22:bd:aa
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 15:bb:4e:b7:42:95:97:c1:4e:18:13:de:d4:4b:1c:87:7c:d2:91:97
Fingerprint (sha256): b7:21:5d:97:8f:2c:7c:01:0f:51:86:46:e3:21:ff:db:99:cc:a6:05:c7:2b:16:43:22:6a:d8:0e:84:16:17:e1

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wmsc.org.nz

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wmsc.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sporty-production2.trafficmanager.net
www.aafl.co.nz
www.actc.org.nz
www.acwpa.co.nz
www.aucklandmarist.co.nz
www.basketballtaranaki.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.bushmultisport.org.nz
www.canoeslalombop.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.czctc.org.nz
www.glenburniceskatingclub.co.nz
www.harboursidenetball.co.nz
www.harboursidenetball.nz
www.hastings-central.school.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.marchingcanterbury.co.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.nelsoncarclub.co.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nzblackpowder.co.nz
www.nzblackpowder.com
www.nztua.com
www.oacnz.org
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.rangitikeigolfclub.co.nz
www.rotoruahockey.co.nz
www.schoolground.com
www.seatounafc.org.nz
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.sportsground.com
www.stheliersbowlingclub.co.nz
www.stjosephschb.school.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.taierirugby.co.nz
www.teawamutusquash.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz

Other certificates including the domain name wmsc.org.nz

(limited to 100 certificates)
willowpark.school.nz
meeanee.school.nz
sporty.co.nz
sporty.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
southlandmtbclub.co.nz
www.opotikicol.school.nz
sporty.co.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.wmsc.org.nz
uniss.co.nz
rosmini.school.nz
www.badmintonhb.co.nz
sporty.co.nz
canterburybaseball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
mtwswim.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.wmsc.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA13W7Q1BnkWYoc79NGq+X
FdOLM90f3G0pgnOm/Lx8zfsUisiwpH6Vnp5TLhtnqhPSn6GTuHv9EYeAu9n19RKZ
dshv9UAplCr48zzwc/oL3Ifyuy01c58wQFt6//Burwzu1gVQSDfcJWLXZsYwLMDc
8ZVw5dD87nhjWOZvsgB9imUrzNB5rtn+zMs4RFf/FPbz2E755BqWD2+BaU3gagma
IMGfFHke6NnRol2XVAt7HHgP9QWZU+/w/uyltJMdednA7Idu7szmHYI2cZ0Zd/AE
liDgNzpOA/xSPwAa8qTQRmapn+a/kUbglN+x+7oj4auPB7D/xsVd5IuEvna8RBhO
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 272910665464635211482177378828732751825669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 23:01:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 23:01:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wmsc.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27199291132082214958815999261536478815214249819017216462064707167095310609995401013682929941584853466876405980132127615654601021603654719836204327414529265983658461457525233798490822684389264070722357541557535175645565226604862762973334651673141607433675172750616758801516211786113372603351758191375392991552912685305092463556385054785415095173751694069694104851987316207956102888806409708540544947136865979574221892423516440948319429921129152212941626288219646472695108739595396254955539251624286689144105238233989232908066908979108496327878692639355922322445280888803486459730729687797059588438604012572691763056291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a1a20967f991505480a7eec36885d749e22bdaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1904 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production2.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.czctc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harboursidenetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harboursidenetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000168824f68900000040300483046022100d74cf84c94f24c0aa1f2ac1bbabacce4193e8a5c4d3c87d266257b1a9aab0baf022100abafd80aa9d071c681ccbefa3f9ac17f5ac00f675fb7012da60dfd70f857104700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000168824f6ad8000004030046304402207c1a180aa5479872b4aea11b0941cc7d67da9fc966181f867173bf1340e072e1022016a2e26675f2a483285e7c9df1657808d3416b7e7c76889c28763a79312ccdab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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