www.waihibeachtennisclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:25:81:0e:6f:ca:21:b3:f8:46:84:09:a9:9a:2a:49:c7 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.waihibeachtennisclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:25:81:0e:6f:ca:21:b3:f8:46:84:09:a9:9a:2a:49:c7
Serial Number (int): 328082053246734088865380803415121548954055
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 76:37:8b:a7:6f:9d:e3:69:f1:6c:74:56:3c:02:e8:cc:25:cd:d9:1e
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4c:d3:fa:b1:b3:5a:aa:03:88:4e:b7:2b:47:c1:01:3e:32:86:fb:52
Fingerprint (sha256): bf:15:96:e5:2e:02:16:10:da:6d:63:52:8a:b0:6d:1d:64:e3:94:41:fc:2f:c7:ac:36:26:9d:d1:e3:3b:95:57

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.waihibeachtennisclub.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.waihibeachtennisclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.athleticswanganui.co.nz
www.avondaleint.school.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.cambridgenetball.org.nz
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.collegerifles.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.dairyflattennis.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.ellesmererugby.org.nz
www.ghryc.co.nz
www.hcwaterpolo.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.kereru.school.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.marlborough-touch.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.netballmanurewa.org.nz
www.netballtaranaki.org.nz
www.newzealandbaseball.co.nz
www.nscbaseball.co.nz
www.opotikicol.school.nz
www.orokohangamusictrust.co.nz
www.papakurarugby.co.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.rosmini.school.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southbridgerugby.com
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.taranakihockey.org.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchcanterbury.co.nz
www.touchsouthland.co.nz
www.uniss.co.nz
www.waihibeachtennisclub.co.nz
www.wairarapacarclub.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.willowpark.school.nz

Other certificates including the domain name waihibeachtennisclub.co.nz

(limited to 100 certificates)
www.sportsground.com
sportycrm.com
www.katikatifc.co.nz
fdmc.school.nz
arrowtownrugby.co.nz
www.bowlswestcoast.org.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.turbotouch.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.schoolground.nz
sked.co.nz
www.waihibeachtennisclub.co.nz
golfnorthland.co.nz
freyberg.ac.nz
whangareirowingclub.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.diamondsportnz.co.nz
www.greenhithefootball.org
cfc.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.waihibeachtennisclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiilA7nXPWPUXcjDpPEKg
JSYRuB4TqyQh/Z0iK25ZJqird0TM3yiXyKn9dvWfdS4cAoa2bmlzkC87UuIrBDdW
KkYBXuRnHMas+ZdHtPpcY1+AuL7joRersqguxWhm4F9i0L1Z3dfNJKEQUV8lkd+6
8eHPW0mBvzxQDK5EILeIvt93KQ1v1sNu3b/Iu8KGo0HXowTFURZ+UxOtxdnM7UWl
+CWXI9yEgfX348vI92E2nxL8j9iNaaeXcRQqugJOUtBybMOZR3IR/GaiWVUi9SQs
tSoT6KIdktcS+fw/+OiDxfCFDlJQ+5PLJdNGEiLH2fvO5qcWH8VoHuCWU3v49jM8
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328082053246734088865380803415121548954055
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 04:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 04:01:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17441229012707850118882242742913641511323906216860339548467247563813573078510224112386301152448116771767870858379460107521931125745916344339634060694158373978387161637029221780332205249213976715909753625748523297891107304672546520802170649206210244206965849508128997642976731403826527184661175981539968477409845566181414748361187927121559546035869368328796913957521805505215236225686703254506021579437265231560923251427252350413779809393476342498180700122720695954931320600790205614183855711846432316234132858807205338856714947774967750743759557937503611810819319791840061601571104595662185229466533468377840283237571
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76378ba76f9de369f16c74563c02e8cc25cdd91e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2346 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3d98990f000004030047304502207ef9eb9b5ac689b07e841311b63ec1d929e0cb58785521f8cf22a454e24d1594022100a29e89407c43e5944935b434c24f1fb11a2f9882841267279679386ad38ae76d00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016d3d989b2c0000040300473045022100de8c8e70ba841898b4cee6206706e26c99ac6807acfe5b6367c7a41fec49667a02200499a1ff3927f17b4ffe99c77462f74f935ae5f3faaa783292cc5cbe9309a87b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064adff9e60cf06abf02f3f494a0e0035e1d7e9f951b0d377c4b1a61dc797229ab6d5df10d9f294c41208a49862dcb6dc1964f4ddb7f8bcec01a7ceb69a6ba04860bc59766562549e1803a7748a91e1f725d86bbd0bc1ef6213d3bde87993cc5d620f8eb78ec992c4c1b526a46b6a100fb282be2e6cfb38947679b5112341e9ff450a15e9a945fec6df02fb9f545d8c9583b785ff8af741deb214fba158cd308696ca5b6b2b5abc2c401846158b37371ab4b8714615924bce093aa4672ea71e279b03ab04b0262a7a9b1a86e23ae1403ebb713be9ebb2bd7efea45feafb25f365e15277473a93baa7a5dd06fc60d88a7a4e960f1aae30f56569da0c7dc1933bd7