uniss.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:77:68:a4:8e:5d:c9:12:79:2e:a9:77:15:19:42:63:e9:b6 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=uniss.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:77:68:a4:8e:5d:c9:12:79:2e:a9:77:15:19:42:63:e9:b6
Serial Number (int): 301969553594651459706796084653224228022710
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 8b:c9:00:32:b4:fa:20:2a:8d:03:66:f1:87:29:d9:df:70:b6:92:83
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): c3:27:36:1d:35:32:9a:f1:87:de:f8:63:55:1e:0c:b7:30:2c:47:0e
Fingerprint (sha256): bb:d6:de:61:e3:b8:b9:bc:96:64:b0:18:a4:6a:eb:48:a9:ab:47:b8:0d:b2:1f:f7:96:85:6b:89:53:c4:87:a7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate uniss.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for uniss.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
actc.org.nz
acwpa.co.nz
ashleyrugby.co.nz
aucklandmarist.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastings-central.school.nz
hastingsintermediate.school.nz
heet.net.nz
manukaumasters.co.nz
manurewarugby.co.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
mchockey.co.nz
melrosetargetshooting.co.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballmanawatu.org.nz
netballtaranaki.org.nz
northcanterburyrugby.co.nz
nzpca.org
oacnz.org
orfu.co.nz
papakurarugby.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
pioneerbasketballclub.co.nz
ponekerugby.com
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rangi.school.nz
rollestonrugby.co.nz
scrfu.co.nz
smognetball.org.nz
southlandmtbclub.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stheliersbowlingclub.co.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
waikatohockey.org.nz
waikatotouch.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
wmsc.org.nz
wops.co.nz

Other certificates including the domain name uniss.co.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
meeanee.school.nz
sporty.co.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
uniss.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
rosmini.school.nz
www.diamondsportnz.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for uniss.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMajCCC1KgAwIBAgISA3dopI5dyRJ5Lql3FRlCY+m2MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQxMDQ4MjRaFw0y
MDA2MDIxMDQ4MjRaMBYxFDASBgNVBAMTC3VuaXNzLmNvLm56MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSFw7NVeQszTw68Jw0pUdDuKEBfptie/lQdt
XSsLYSPuyWCH4wGolw1cAJruamcY52ZqmnnF6+hHL2X0Ckqj9+YnpgWtCHGGAhYt
aa7RMv7K1daHsUmEnyNj1eVwZy851YskmCRnHBbT1rVhIpwTYAj1Pczv/+jYX7uz
REj6TaX+eRJi/o/K8u7ZtAKu9HuONF+bJZhgvX7KQCD2lFbd4NXK5DJlwpRfwcwy
AVwpQT3qYqUZtnBJd63DifiMtKpJFJGjanLs07BlUU6Ybp48kF1vSGjusBFbbDfX
HnyU9B88UsX6neOS3aJkqEuGjRWZvCeyR4jH7F8iS7sJ2ZAT4QIDAQABo4IJfDCC
CXgwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBSLyQAytPogKo0DZvGHKdnfcLaSgzAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIHMAYDVR0RBIIHJzCCByOCCmFhZmwuY28ubnqCC2FjdGMub3JnLm56ggthY3dw
YS5jby5ueoIRYXNobGV5cnVnYnkuY28ubnqCFGF1Y2tsYW5kbWFyaXN0LmNvLm56
ghFiYWRtaW50b25oYi5jby5ueoIWYmxlbmhlaW1nb2xmY2x1Yi5jby5ueoIUYmx1
ZmZoaWxsYm93bHMuY28ubnqCFGJvd2xzd2FuZ2FudWkub3JnLm56gg9ib3hpbmdu
ei5vcmcubnqCFWJ1c2htdWx0aXNwb3J0Lm9yZy5ueoIXY2FtYnJpZGdlbmV0YmFs
bC5vcmcubnqCC2NhbmFtanUub3Jngh5jYW50ZXJidXJ5Y29tbXVuaXR5cnVnYnku
Y28ubnqCFWNhbnRlcmJ1cnlydWdieS5jby5ueoIZY2xldmVkb25jcmlja2V0Y2x1
Yi5jby5ueoIXY2xldmVkb25yaWZsZWNsdWIuY28ubnqCCmNtaWguY28ubnqCCmNy
ZnUuY28ubnqCFWVsbGVzbWVyZXJ1Z2J5Lm9yZy5ueoIWZ2lzYm9ybmVoYXJyaWVy
cy5jby5ueoIcZ2xlbmJ1cm5pY2Vza2F0aW5nY2x1Yi5jby5ueoIUZ3JhbW1hcmNh
cmx0b24uY28ubnqCEGdyYW1tYXJ0ZWMuY28ubnqCFWhhbHN3ZWxsY3JpY2tldC5j
by5ueoIaaGFzdGluZ3MtY2VudHJhbC5zY2hvb2wubnqCHmhhc3RpbmdzaW50ZXJt
ZWRpYXRlLnNjaG9vbC5ueoILaGVldC5uZXQubnqCFG1hbnVrYXVtYXN0ZXJzLmNv
Lm56ghNtYW51cmV3YXJ1Z2J5LmNvLm56ghdtYXJpYW5jb2xsZWdlLnNjaG9vbC5u
eoIObWFyaXN0ZmMuY28ubnqCDm1hcmlzdG5oLmNvLm56ghdtYXJsYm9yb3VnaHRl
bm5pcy5jby5ueoIObWNob2NrZXkuY28ubnqCG21lbHJvc2V0YXJnZXRzaG9vdGlu
Zy5jby5ueoIYbWlkY2FudGVyYnVyeXJ1Z2J5LmNvLm56ghltdHRhdWhhcmFneW1u
YXN0aWNzLmNvLm56ghdtdHdlbGxpbmd0b25ydWdieS5jby5ueoINbXR3c3dpbS5j
by5ueoILbmNuYy5vcmcubnqCE25lbHNvbmNhcmNsdWIuY28ubnqCFG5ldGJhbGxr
YXBpdGkub3JnLm56ghZuZXRiYWxsbWFuYXdhdHUub3JnLm56ghZuZXRiYWxsdGFy
YW5ha2kub3JnLm56ghpub3J0aGNhbnRlcmJ1cnlydWdieS5jby5ueoIJbnpwY2Eu
b3JngglvYWNuei5vcmeCCm9yZnUuY28ubnqCE3BhcGFrdXJhcnVnYnkuY28ubnqC
EXBhcGFyb2Euc2Nob29sLm56ghJwYXJrdmFsZS5zY2hvb2wubnqCEXBpY2tsZWJh
bGwub3JnLm56ghtwaW9uZWVyYmFza2V0YmFsbGNsdWIuY28ubnqCD3BvbmVrZXJ1
Z2J5LmNvbYIYcHJlYmJsZXRvbm5ldGJhbGwub3JnLm56gh1wcmltYXJ5c3BvcnR3
ZWxsaW5ndG9uLm9yZy5ueoIScHVob2lzcG9ydHMub3JnLm56gg9yYW5naS5zY2hv
b2wubnqCFHJvbGxlc3RvbnJ1Z2J5LmNvLm56ggtzY3JmdS5jby5ueoISc21vZ25l
dGJhbGwub3JnLm56ghZzb3V0aGxhbmRtdGJjbHViLmNvLm56ghRzcG9ydHNvdXRo
bGFuZC5jby5ueoIPc3RhbnRob255LmFjLm56ghpzdGhlbGllcnNib3dsaW5nY2x1
Yi5jby5ueoIPc3Rqb3Muc2Nob29sLm56ghJzdWJ1cmJzcnVnYnkuY28ubnqCEXRh
aWVyaXJ1Z2J5LmNvLm56gg10YW5pd2hhLmNvLm56ghV0YXJhbmFraWhvY2tleS5v
cmcubnqCGXRhc21hbnJ1Z2J5cmVmZXJlZXMuY28ubnqCF3RlY2huaWNhbGhhcnJp
ZXJzLmNvLm56ghZ0aW1hcnVzcXVhc2hjbHViLmNvLm56ghV0b3VjaGNhbnRlcmJ1
cnkuY28ubnqCF3RyZW50aGFtcmlmbGVjbHViLmNvLm56ghR0dWFrYXVwb255Y2x1
Yi5jby5ueoISdWx0cmFydW5uZXIub3JnLm56ggt1bmlzcy5jby5ueoITdmFsbGV5
aG9ja2V5Lm9yZy5ueoITdm9sbGV5YmFsbGJvcC5jby5ueoIUd2Fpa2F0b2hvY2tl
eS5vcmcubnqCEndhaWthdG90b3VjaC5jby5ueoIWd2VsbGluZ3RvbnRvdWNoLm9y
Zy5ueoIZd2VsbHNmb3Jkc3F1YXNoY2x1Yi5jby5ueoIKd2h0Yy5jby5ueoILd21z
Yy5vcmcubnqCCndvcHMuY28ubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdQDnEvKwN34aYvuOyQxhhPHqezfL
Vh0RJlvz4PNL8kFUbgAAAXClYBwaAAAEAwBGMEQCIDVoYTXzCys9FLbDpgw8h03x
pvesoH9cUdb2jKEFg2CTAiA8LVHH3zoVbofOMqrELY0+JhpnTHxydKz+JaQT1GnZ
xAB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABcKVgHBoAAAQD
AEgwRgIhAMgvIm+uFchcL/D448qfNkTXRSP+gtzLr0cSB3Mx6bgSAiEA/r+rqL+T
esDKoIUMruyjocgvD5WhCbbK+35MkvKWCtEwDQYJKoZIhvcNAQELBQADggEBADr5
Fdk2qpdraf5OeO9VqvKTXOoR87KdDjIp4Km+EFof6FutnK7XRaCUxDA9NyJXbIAe
BWo4VFtQXUnrkvvHiXSBJsZS63bF9Zrl/zSrEMzmwz9d6sa+SgbeJpTmsdxUFhHz
425T4eOOPybCsRjiYBTB3mLidTL91HepsMUPwpLXgZqe1uLay6FADQkI+6XDTijy
ZsADuR6jeznPwQdTq4qvMM0oW6hSl8GMMM/Q/PxjNL3ruoeIEtcB6U5W9EGCTCQm
TS48iBHVHix5OXK6kTvnl5NsRl03qK0lq9z18rcQlzHPkmLl7xvHN5KSVQQn6jJ1
V6BI7fMa83HuWn+3XMY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoSFw7NVeQszTw68Jw0pU
dDuKEBfptie/lQdtXSsLYSPuyWCH4wGolw1cAJruamcY52ZqmnnF6+hHL2X0Ckqj
9+YnpgWtCHGGAhYtaa7RMv7K1daHsUmEnyNj1eVwZy851YskmCRnHBbT1rVhIpwT
YAj1Pczv/+jYX7uzREj6TaX+eRJi/o/K8u7ZtAKu9HuONF+bJZhgvX7KQCD2lFbd
4NXK5DJlwpRfwcwyAVwpQT3qYqUZtnBJd63DifiMtKpJFJGjanLs07BlUU6Ybp48
kF1vSGjusBFbbDfXHnyU9B88UsX6neOS3aJkqEuGjRWZvCeyR4jH7F8iS7sJ2ZAT
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301969553594651459706796084653224228022710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 10:48:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 10:48:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'uniss.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20340857527352912695040467489238196483657201235597185891719197517641356021598461439468448150758184093615001603562049160859156780912582968384841320494237041456303890842617105332907205192373260809182657540581358277582426561508305986458264835291664202185477696684054716559167217141213000825814254507625631873479228359991339496642002085385116907309438489137195903448702291303379633041432630487156564450989207640331516486282831642899832765873337687974755876895976144305784709411672413075263892301360218414096056058516335804703527176258856379057280318584200727138891915470192325867250699809999704968909209596106096642102241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8bc90032b4fa202a8d0366f18729d9df70b69283
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1831 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500e712f2b0377e1a62fb8ec90c6184f1ea7b37cb561d11265bf3e0f34bf241546e00000170a5601c1a0000040300463044022035686135f30b2b3d14b6c3a60c3c874df1a6f7aca07f5c51d6f68ca10583609302203c2d51c7df3a156e87ce32aac42d8d3e261a674c7c7274acfe25a413d469d9c4007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a5601c1a0000040300483046022100c82f226fae15c85c2ff0f8e3ca9f3644d74523fe82dccbaf4712077331e9b812022100febfaba8bf937ac0caa0850caeeca3a1c82f0f95a109b6cafb7e4c92f2960ad1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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