loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:58:43:40:c8:b5:cd:ba:d5:db:7c:f8:95:45:76:d3:ad:05 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:58:43:40:c8:b5:cd:ba:d5:db:7c:f8:95:45:76:d3:ad:05
Serial Number (int): 291371100737925748759646101855351558352133
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:6c:4c:6d:aa:5c:e5:01:4a:6a:b0:f1:c2:d7:0d:16:31:9e:cd:93
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1e:92:ea:05:29:f9:76:c5:bc:3b:0a:a4:03:a5:94:02:ca:8c:5b:b5
Fingerprint (sha256): ba:d9:07:11:03:e4:49:1e:c6:ba:45:47:ec:ea:8d:ad:8a:07:55:05:5d:4a:db:53:fa:94:d7:e4:bd:c4:22:c7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
beta.jucy.com
beta.jucy.com.loadbalancer.nix.jucy.co.nz
beta.jucy.com.web1.nix.jucy.co.nz
beta.jucy.com.web2.nix.jucy.co.nz
content.jucy.com
cp.nix.jucy.co.nz
ecotoursmilford.co.nz
ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
ecotoursmilford.co.nz.web1.nix.jucy.co.nz
ecotoursmilford.co.nz.web2.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucy.com.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.ecotoursmilford.co.nz
www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucy.com.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUo+BWQg2Q4ieabs/pXi
4ak8pwszimEBtUmv+Gk3Qs2T/Gowb9oj4ER+CFAlvl0GlowhTmFZ6kAjuTMJSYac
eF55lGL2VcTln4FIUl4J2G5OAWV/vIWgbFn49PrtfsSo2fophlmtD6sXJ6I7Rp9F
dLFIvhlLZ1FuGu6snw3lMP0QhnefYN4wSbDjp4v2uXQXaL1LhWhO+8ugecFpYxWT
/2DSCbsNmvYdOMXpkrXJzaH5yonPWfKm0f6bujGm00Cz1PWh94M6SwAEcju3/7sy
Ew8mmmOg3gAvi/MLfK2p+i3j1kcAbl5ccb6N0C5gx4Jmh6bapRq5wiDaK3d6QQ6G
SQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 291371100737925748759646101855351558352133
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 23:23:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 23:23:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25915462745743560700531232998635913836547695514223506449819445459632060420705250590070241721518071354769204780881440581661541542555640017473146715365165160134177647331567447081205299051058161745086419742153341513924026828554655481079616916206667617794901337715523087276352144074979752976725450253981688267860806772564393151619100786174217085754593839573256490320947311525614150608365898558042065895909603406806044905274854086396445038599336019119876765182344996645690903251923695589967573272178165127084575332348141214937317877164216368293021023828329777690752656265216553067195082337937621318109005396172306721441353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b6c4c6daa5ce5014a6ab0f1c2d70d16319ecd93
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2475 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016dfb25bb7b000004030046304402204af97d04dfa55b221eb297c401dec9ae237c97cf294d709fa31580bae60d125b022021e9c02525cdc359b39c6e0631bd58bd8a62e2b13da5181d390eb2df3265e718007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016dfb25bb7300000403004730450221008e07d5c87a6a8205780985930ef7872bc99a3f350a995562d6431ca23fdeeb3e02204a23e726e093f76fdd8529a46a14f45dfdbcaf4e040cbdb59bc419b16a3b77e8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00859be3ba911a5d18883c1115591e195539e0678e3359c30c933ba069bf589944a0a70ab1767108d6aacac0a0812d64c96aa406e27e33760afd322b3de97b1e43e1cbc29445816cf3446cd0458b9c8429327ba0bc57a27289deb32c4339f2bc2df93105aca7bfe1ff87f18c0ed3b907aa5621d9c52599e6b3def536ec2a6962000012c1e65c5b3a921f6d15d8c44c72b953185a70b12951f5e22c78a29acdde69e6bafee5d9bdf37d5dfaa15f8e4302e5824b436e4b91e93fbb51d154bc6a4180606811515fd5bf29a6943b0ec4e19ed37ead5c01703c0948cb2a5d5d21dd60e5b97217c6110767270e37448487c47d6387503328aac1edc34180d7440c9b0bea