golfnorthland.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:52:a8:a7:35:c0:25:14:31:c5:f5:d6:93:84:fd:d6:c6:a4 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=golfnorthland.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:52:a8:a7:35:c0:25:14:31:c5:f5:d6:93:84:fd:d6:c6:a4
Serial Number (int): 289464190389855926681934968594825234269860
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:15:b9:46:ba:2f:71:f6:d1:a5:cf:0f:b3:97:88:4d:65:13:97:e3
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:f5:94:43:9d:64:7b:11:46:3e:0d:b0:74:11:1a:1d:aa:97:39:e8
Fingerprint (sha256): c8:e7:82:1a:fa:fe:3b:67:ab:e1:69:b3:fa:60:ad:de:a9:7e:ea:df:84:3e:03:f9:06:a3:b9:d5:ee:61:40:35

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate golfnorthland.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for golfnorthland.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
arrowtownrugby.co.nz
basketballhawkesbay.co.nz
bopgolf.co.nz
bowlswaikato.co.nz
burwoodparktennisclub.kiwi
canterburywaterpolo.org.nz
cashmere.school.nz
countiesmanukaurugbyleague.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
goodmanrural.co.nz
greenacrescountry.org.nz
hampsteadclub.co.nz
harbourgolf.co.nz
havelocknorth.rugby
havelocknorthbridgeclub.co.nz
hawkesbay.basketball
hawkesbaynetball.co.nz
hawkesbayrugbyreferees.co.nz
hawkfootball.org.nz
hbmagpies.co.nz
hbnetball.co.nz
hbrfu.co.nz
hbru.co.nz
hbrugby.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
hpnc.org.nz
huianetball.co.nz
huttaikido.org.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kjcc.org.nz
magpies.co.nz
maristrugby.org.nz
marlboroughtrampingclub.co.nz
marsdensport.school.nz
membermanager.co.nz
merivalepap.co.nz
metrofootball.org.nz
mountsports.co.nz
mtbtauranga.co.nz
mtsquashclub.co.nz
northshorerugby.co.nz
nzblackpowder.nz
nzssfootball.co.nz
otakisportsclub.co.nz
papakurarugbyleague.co.nz
photocard.co.nz
pngolf.co.nz
pointrugby.co.nz
ponsonbyrugby.co.nz
rangatiragolf.co.nz
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
sked.co.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
supersixes.co.nz
taradaleint.school.nz
tasmanvolley.org.nz
taurangafarmersmarket.co.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wanakafootball.nz
wellingtonsoftball.org.nz

Other certificates including the domain name golfnorthland.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.golfnorthland.co.nz
www.giafc.co.nz
sportycrm.com
www.golfnorthland.co.nz
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.golfnorthland.co.nz
www.golfnorthland.co.nz
www.golfnorthland.co.nz
www.golfnorthland.co.nz
www.golfnorthland.co.nz
www.sportsground.com
www.golfnorthland.co.nz
www.golfnorthland.co.nz
www.golfnorthland.co.nz
sporty.org.nz
sporty.org.nz
www.golfnorthland.co.nz
www.golfnorthland.co.nz
sporty.org.nz
www.golfnorthland.co.nz
sporty.org.nz
golfnorthland.co.nz
freyberg.ac.nz
sporty.org.nz
www.golfnorthland.co.nz
sporty.org.nz
sporty.org.nz
www.golfnorthland.co.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz
www.golfnorthland.co.nz

Certificate

The complete raw certificate details for golfnorthland.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6zF2ofUshfXso3zEYuV
432U14SjPAp4lVhyOdHEzBbLgoMchPq7HyEvsFz4e58W1327L2Hga84HV/+QbzQ9
Lj59KJ66P9T/wllRYrqVe5fXMtBMXFHuG6O0uysj8izmHKJ0NJDM+as1OkorqOZF
nP1Fx+Lop8dh1UveR+P+QtpukBwOoSS0xPBY9JKauY5/wUxiY2abzyH9BaAhVok/
kz9BZlc4ndnQXyIcun6OU+HEJrbkWYVz8WisDDkFzJjztTly0eS0InQDe4ugZQ3q
B9DCYVY9FzMph1tIjZHYg1rDBOtdgoZvWv3/z0hn2p0qFyTwxrGN9yCBglKz54LU
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 289464190389855926681934968594825234269860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-29 03:11:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-27 03:11:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'golfnorthland.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16622415426014398505142216413564563201649757729172601902223230157823253260847074320690887366888898051321745583780272925233201954885718545731529838069547521257843702356857656280141075186694927541571342263338646920255335258386342043673667278152975576476066150624426503541754622875410861261180389553609609845567965287267981384406196928157766542539763522675922767994463706920809345429040687127355042015289736949144729452517317888633773674532840645893925901912715947395628596315072137757753647884067075787985964825991690496354027500153464042538873539508817408653632958801875463116866146629180293743755767969092055353971909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a115b946ba2f71f6d1a5cf0fb397884d651397e3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016b01c8d7830000040300483046022100e8f57bc4ba4714c6ab531b725a31cc715c998923530d0b8412881bdd7723b121022100a2a5a56746a31c414cbe5bc4bd5141b59577fad2a4668d71dd88eb6a06f2bbea00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016b01c8d7a30000040300483046022100b925506e53251c0e7b4269af80cc29a6233c8e04e769b62408c51a3e75c759ed022100b802d3cc3218e1a938d2ea1b18d6aac5429d1635b65e5032311a25f3b3c59330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00395ceee8426a8805d58aa0f80f853a4703dbbbe3de0897d3e46764ea2e736c348e26ef3396ad30c328484899a502a289ea51681e3ff0dc6ee943958072385269ddfb9ab5aa27c7ac07473795ce2df4cdfbfe472b414e65d36d3e4dbaa3c74728dd2dc4b41345963f5a228659a7a43db214d2654afb269332338f27c6c4bd8d0c5abe3c5f0c2d1179d64d4c4fb054d144eb3dbded972af6fabdd2ff94a858eb9cd7c6570c508da0e180ead4a9f0314c7b421469c19afe129bd0f036514d14205a35f2e0d6348c24d95bfda87529c04c02b9eeb36faf8ff77f5caa5f203dcf1426aaea267223438826df91d99675a9720de6d7a1c91fe9445b72398da914793330