sporty.org.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:9c:1f:ad:d4:24:ad:fc:bc:87:b7:23:a4:a6:e7:f3:9a:a9 was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:9c:1f:ad:d4:24:ad:fc:bc:87:b7:23:a4:a6:e7:f3:9a:a9
Serial Number (int): 401575301604710142075003477979660381559465
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 4d:80:d3:90:e0:2c:1b:8f:86:96:15:80:5c:d7:76:22:76:d4:7e:be
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7a:dd:8d:db:a1:a0:52:de:9d:f4:92:41:c6:05:50:a0:fc:c1:6e:1a
Fingerprint (sha256): b7:dd:96:ce:7c:ef:79:55:83:bd:19:9e:6c:dc:fc:cf:c0:9d:47:2e:a5:14:0f:61:dc:c7:8a:e0:82:34:7a:4c

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.org.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

activeselwyn.org.nz
aucklandcricket.co.nz
auroracollege.school.nz
belfastbowlingclub.co.nz
bmxnewzealand.co.nz
bmxnewzealand.com
bmxnz.com
bmxnz.nz
canterburypickleball.org.nz
charterisbayyachtclub.co.nz
christchurchpark.co.nz
cwa.org.nz
dunedinicestadium.co.nz
eastcitybmx.com
ellersliecricket.co.nz
fit4football.co.nz
flyingnz.co.nz
glenfieldrugby.co.nz
hadlow.school.nz
hbspeedwayclubinc.co.nz
houhorafishingclub.co.nz
jcc.org.nz
kaiauaboatingclub.nz
karoricricket.co.nz
manawaturugby.co.nz
maori.basketball
mauao.school.nz
morrinsvillebowlingclub.co.nz
msfc.org.nz
mxt.co.nz
navalpoint.co.nz
newlandsprimary.school.nz
npsuc.co.nz
npsuc.org.nz
paraparaumucollege.school.nz
pihaslsc.com
pnghs.school.nz
rookiesox.co.nz
rosebank.school.nz
secondtononebasketball.co.nz
shsinv.school.nz
softballfoundationnz.org.nz
sporty.org.nz
stampede.nz
stream.school.nz
teawamutunetball.co.nz
tewaipounamutouch.co.nz
touchnzinternational.co.nz
touchnzinternational.nz
volleyballotago.nz
whanganuirugby.co.nz

Other certificates including the domain name sporty.org.nz

(limited to 100 certificates)
sporty.org.nz
www.sportycrm.com
sporty.org.nz
sporty.org.nz
www.giafc.co.nz
sportycrm.com
sporty.org.nz
fdmc.school.nz
arrowtownrugby.co.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz

Certificate

The complete raw certificate details for sporty.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIII9TCCB92gAwIBAgISBJwfrdQkrfy8h7cjpKbn85qpMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMTEyMjI1MjNaFw0yNDA0MTAyMjI1MjJaMBgxFjAUBgNVBAMT
DXNwb3J0eS5vcmcubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY
zSg58M2LobX//tJPciJxAy7wWgE4hwBVJAqkBsqbd0ilF0Ka8nMWFfVv7n32cOyy
dQSgfaRqOBR6ufQYN1yezMUwNAwdnwQl4WhkL1Hw/XzbI0gQfgAcGRgWKaUr78p5
wFwPzV7OYLAJatGExTy4trSRn/oX47zR1E7stY9ViD7eI/MT4QHXEZ9MUEH1kFnh
YOzwrsKNLf1v6a+t7h3bcAhZBUVUnrIV/zVI85Ee0h/3ZFLavNqYt6Q0M0mRhfN+
VXCJNZO8eSjTMCOKFa+y1Gd2/ORKMem9Xyy5RbxPPbaBmM2VWpV2eD+0ySbuQGkS
zYPU1flX78+MturAlrL9AgMBAAGjggYdMIIGGTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0O
BBYEFE2A05DgLBuPhpYVgFzXdiJ21H6+MB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJ
QOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3Iz
Lm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcv
MIIEIwYDVR0RBIIEGjCCBBaCE2FjdGl2ZXNlbHd5bi5vcmcubnqCFWF1Y2tsYW5k
Y3JpY2tldC5jby5ueoIXYXVyb3JhY29sbGVnZS5zY2hvb2wubnqCGGJlbGZhc3Ri
b3dsaW5nY2x1Yi5jby5ueoITYm14bmV3emVhbGFuZC5jby5ueoIRYm14bmV3emVh
bGFuZC5jb22CCWJteG56LmNvbYIIYm14bnoubnqCG2NhbnRlcmJ1cnlwaWNrbGVi
YWxsLm9yZy5ueoIbY2hhcnRlcmlzYmF5eWFjaHRjbHViLmNvLm56ghZjaHJpc3Rj
aHVyY2hwYXJrLmNvLm56ggpjd2Eub3JnLm56ghdkdW5lZGluaWNlc3RhZGl1bS5j
by5ueoIPZWFzdGNpdHlibXguY29tghZlbGxlcnNsaWVjcmlja2V0LmNvLm56ghJm
aXQ0Zm9vdGJhbGwuY28ubnqCDmZseWluZ256LmNvLm56ghRnbGVuZmllbGRydWdi
eS5jby5ueoIQaGFkbG93LnNjaG9vbC5ueoIXaGJzcGVlZHdheWNsdWJpbmMuY28u
bnqCGGhvdWhvcmFmaXNoaW5nY2x1Yi5jby5ueoIKamNjLm9yZy5ueoIUa2FpYXVh
Ym9hdGluZ2NsdWIubnqCE2thcm9yaWNyaWNrZXQuY28ubnqCE21hbmF3YXR1cnVn
YnkuY28ubnqCEG1hb3JpLmJhc2tldGJhbGyCD21hdWFvLnNjaG9vbC5ueoIdbW9y
cmluc3ZpbGxlYm93bGluZ2NsdWIuY28ubnqCC21zZmMub3JnLm56gglteHQuY28u
bnqCEG5hdmFscG9pbnQuY28ubnqCGW5ld2xhbmRzcHJpbWFyeS5zY2hvb2wubnqC
C25wc3VjLmNvLm56ggxucHN1Yy5vcmcubnqCHHBhcmFwYXJhdW11Y29sbGVnZS5z
Y2hvb2wubnqCDHBpaGFzbHNjLmNvbYIPcG5naHMuc2Nob29sLm56gg9yb29raWVz
b3guY28ubnqCEnJvc2ViYW5rLnNjaG9vbC5ueoIcc2Vjb25kdG9ub25lYmFza2V0
YmFsbC5jby5ueoIQc2hzaW52LnNjaG9vbC5ueoIbc29mdGJhbGxmb3VuZGF0aW9u
bnoub3JnLm56gg1zcG9ydHkub3JnLm56ggtzdGFtcGVkZS5ueoIQc3RyZWFtLnNj
aG9vbC5ueoIWdGVhd2FtdXR1bmV0YmFsbC5jby5ueoIXdGV3YWlwb3VuYW11dG91
Y2guY28ubnqCGnRvdWNobnppbnRlcm5hdGlvbmFsLmNvLm56ghd0b3VjaG56aW50
ZXJuYXRpb25hbC5ueoISdm9sbGV5YmFsbG90YWdvLm56ghR3aGFuZ2FudWlydWdi
eS5jby5uejATBgNVHSAEDDAKMAgGBmeBDAECATCCAQUGCisGAQQB1nkCBAIEgfYE
gfMA8QB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjPrYO1oA
AAQDAEgwRgIhANzpAWgKxypBN3qSNfWBWEXVp82d5yT2w2bRBp9PbdS/AiEAjQyG
wbVdFGDL2bl9BTQGFVu46bF8QVLtHNRcnT1toYsAdgCi4r/WHt4vLweg1k5tN6fc
ZUOwxrUuotq3iviabfUX2AAAAYz62DtfAAAEAwBHMEUCIAyZQxj6UG7ojfqiLn12
wnbyMICj1hrAVOKNMYJLYhbdAiEAmuM9vaahXqHh1N/Ku4/prgk9rM8lzIAihPFs
xYEWaeYwDQYJKoZIhvcNAQELBQADggEBAD2GMzXHMJ9l4nDcFkc3/qyMHGYUmvwS
Udyskv04f7AOaAaM6Eb5ScfYiwb417elhJO5L1GMxTmlQkDlUxw8bAlgQgLbODnX
mQhyuu8pVKZl8RmSVVh197+DtBQD5Zfydf7lguM48EEAG+IsST42i2dab17nJDUq
93+d+90NZ9cH4X00ecqjIak+gdwTAZjkynEVY3pTRfRR/DS4zykY0UXjcliNyXVT
zcjx/JA04Lhy6pbizRVLsOIlimPFJSig3RWTkmcJYvqtnMRMUkjCODmHUWoNcqQn
JIoJ14ivs3CAaTwvXGdVSZobom+IRXynJOqDPHkdgEBeIZieKdU4Ego=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmM0oOfDNi6G1//7ST3Ii
cQMu8FoBOIcAVSQKpAbKm3dIpRdCmvJzFhX1b+599nDssnUEoH2kajgUern0GDdc
nszFMDQMHZ8EJeFoZC9R8P182yNIEH4AHBkYFimlK+/KecBcD81ezmCwCWrRhMU8
uLa0kZ/6F+O80dRO7LWPVYg+3iPzE+EB1xGfTFBB9ZBZ4WDs8K7CjS39b+mvre4d
23AIWQVFVJ6yFf81SPORHtIf92RS2rzamLekNDNJkYXzflVwiTWTvHko0zAjihWv
stRndvzkSjHpvV8suUW8Tz22gZjNlVqVdng/tMkm7kBpEs2D1NX5V+/PjLbqwJay
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 401575301604710142075003477979660381559465
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-11 22:25:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-10 22:25:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19289389108204101394845349182566935846122991245553921171516289199848127005031992818128816305709728318261471881056915638468135989986268003029475488282254026451142418268666543452044739611482214546229729694979106083002811915628565306182193484862209464195826533987350468609470825864637394872251826956610345479397218593038451624362789038471983097630346624247004659131526429524520539987765000947548160417195610784167482163518785967955660995105108868048022494382660189688013756735484816865185218294635790184038654590730092444279271975554922287053748870420648370904481627197394046271872363800198941496239744203584109331002109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d80d390e02c1b8f869615805cd7762276d47ebe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1050 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activeselwyn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auroracollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfastbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmxnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburypickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charterisbayyachtclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchpark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinicestadium.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcitybmx.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellersliecricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fit4football.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hadlow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbspeedwayclubinc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'houhorafishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiauaboatingclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karoricricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawaturugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maori.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mauao.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morrinsvillebowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mxt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navalpoint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newlandsprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsuc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npsuc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paraparaumucollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pihaslsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pnghs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rookiesox.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosebank.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondtononebasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shsinv.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballfoundationnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stampede.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teawamutunetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tewaipounamutouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnzinternational.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnzinternational.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballotago.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whanganuirugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cfad83b5a0000040300483046022100dce901680ac72a41377a9235f5815845d5a7cd9de724f6c366d1069f4f6dd4bf0221008d0c86c1b55d1460cbd9b97d053406155bb8e9b17c4152ed1cd45c9d3d6da18b007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018cfad83b5f000004030047304502200c994318fa506ee88dfaa22e7d76c276f23080a3d61ac054e28d31824b6216dd0221009ae33dbda6a15ea1e1d4dfcabb8fe9ae093daccf25cc802284f16cc5811669e6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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