sked.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4a:30:2e:73:f9:20:db:a9:ab:4b:ec:24:83:20:60:78:0b was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sked.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4a:30:2e:73:f9:20:db:a9:ab:4b:ec:24:83:20:60:78:0b
Serial Number (int): 286581797089098440762434211689355555141643
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 3a:37:51:1c:3e:05:3c:14:04:4e:44:20:0b:e3:1d:83:1f:15:18:32
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 6a:58:cf:3e:cb:8a:06:50:fc:c3:9a:72:31:a6:57:92:b9:ad:e2:10
Fingerprint (sha256): be:af:64:f8:af:0a:f0:ea:3f:de:e8:ab:0e:4a:6f:ff:d4:7e:04:40:fe:3e:16:cf:8b:2e:80:b6:d1:d5:c0:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sked.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sked.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
basketballhawkesbay.co.nz
bopgolf.co.nz
bowlswaikato.co.nz
burwoodparktennisclub.kiwi
canterburywaterpolo.org.nz
cashmere.school.nz
countiesmanukaurugbyleague.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
flaxmillbaymotel.co.nz
glenfieldrugbyleague.co.nz
goodmanrural.co.nz
greenacrescountry.org.nz
greenislandbadmintonclub.net.nz
hampsteadclub.co.nz
harbourcityhockey.org.nz
havelocknorth.rugby
havelocknorthbridgeclub.co.nz
hawkesbay.basketball
hawkesbaynetball.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbcricket.co.nz
hbmagpies.co.nz
hbnetball.co.nz
hbrfu.co.nz
hbru.co.nz
hbrugby.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hillseekers.co.nz
hillseekers4wd.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marsdensport.school.nz
merivalepap.co.nz
mountsports.co.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzsssc.co.nz
otakisportsclub.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
pngolf.co.nz
pointrugby.co.nz
ponsonbyrugby.co.nz
rangatiragolf.co.nz
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
sked.co.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
sportynews.co.nz
supersixes.co.nz
taradaleint.school.nz
tasmanvolley.org.nz
taurangafarmersmarket.co.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wellingtonsoftball.org.nz
westcoastsoftball.co.nz

Other certificates including the domain name sked.co.nz

(limited to 100 certificates)
www.sportycrm.com
sportycrm.com
www.sportsground.com
fdmc.school.nz
arrowtownrugby.co.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sked.co.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for sked.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6/8AHi1ZPiZwMjnTSvC
zj4xtYmUJh3ZbwDn327lviZ6rMPxPhi7JjCB68uyrByHc8ZGErJmNfCHPxOf2Ot5
kPqcwp5JDmvNPaW2Wte4Dia1C1FnWS3a3Lo4QkhA64t1UZgGjv/zEd5+1D7/LctL
tRX6RXo5bH68X82v4D4avbJx2SVtNyMnASP7E0FuMjvI7kYnP/cD/+DLe5TXhQiI
t/aCP5Hc2Tr4SodEHmxwSvGt8kNzMy9A0C3gVUjxrCALqdRm2jkxXtwgvsxPtMDQ
NxZhEmg5OEpUDUbza2fo802xD1Wo5pguRS2uuwuHoCgjQLSNHlzYm4iEDtZZ+WcH
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286581797089098440762434211689355555141643
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:57:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-26 00:57:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sked.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20663624842704936339870366755767495385178987636191281172411378476930986908199663066288743542938379147569531917632425429278230169921334122205848478961669952152216883636445046115262432278460503666475353437320521986077184207993090425358263546276006785740079343348317940110580636345311959390420645354121146768996962701855313725201159249375489954876477304716423930982284233220518183920291463107349233356784803029532987216546002648784458061785681074489707218167920421031642021132527426641688116327785555144251879650774166580306691601337721194797373443494082531108462962097093434145587545560634608360159862727964809534834671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a37511c3e053c14044e44200be31d831f151832
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1872 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenislandbadmintonclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportynews.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe00000169c204a86f000004030046304402207141f57f31b6448e090295f823427dc65e9459205d7cabcb2b3043c99477013f02200a87e75e3eea8e23dbc0da094ec37aab940aa4d6d2653922579eba607485abcf007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169c204a8ca00000403004730450220285557c81d255721668f72d949f62b4abde2a616ceab3bf8d7cc70348a9a142602210093262a9c354740d702449c9311e4ab2fcf941da94d09e2674021350ba290b1ba
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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