freyberg.ac.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:37:5e:e8:62:b5:17:fe:f0:5f:37:a0:85:5b:30:70:df:70 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=freyberg.ac.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:37:5e:e8:62:b5:17:fe:f0:5f:37:a0:85:5b:30:70:df:70
Serial Number (int): 280178542022431182532874103484825415507824
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b7:b3:e4:14:2f:a7:b8:f3:d1:e4:a5:19:bd:fe:75:36:5c:b8:82:72
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 42:d6:ab:b4:e9:6e:f8:3e:c0:b2:06:e4:3d:93:aa:a5:ed:2a:d4:0e
Fingerprint (sha256): c9:1d:c8:b8:23:ab:5e:81:18:a5:5e:93:a1:f5:29:14:74:c9:56:13:a4:8e:f7:21:f1:1f:dd:b3:09:2a:9a:63

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate freyberg.ac.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for freyberg.ac.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arrowtownrugby.co.nz
athleticsotago.co.nz
aucklandsoftball.org.nz
basketballhawkesbay.co.nz
bowlswaikato.co.nz
canoepolohb.co.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
cra.kiwi
cricketwellington.co.nz
cyclingsc.co.nz
darel.co.nz
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
fenciblefoundation.co.nz
freyberg.ac.nz
gijfc.co.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
greenacrescountry.org.nz
harbourgolf.co.nz
hastingsboys.school.nz
havelocknorth.rugby
hawkesbay.basketball
hawkesbaynetball.co.nz
hbnetball.co.nz
hbrugby.co.nz
healthyfamilieswaitakere.org.nz
hjac.org.nz
hockeywanganui.org.nz
hokowhitubridge.org.nz
horouta.co.nz
huianetball.co.nz
ie19.co.nz
ie19.nz
jonesyyouthfoundation.co.nz
kartsport.org.nz
kirweerugby.co.nz
kiwitagnz.co.nz
leamingtonrugby.co.nz
lindisfarne.school.nz
lrsc.co.nz
manawatusoftball.co.nz
manawatusoftball.org.nz
maniapoto.school.nz
manukauaucklandvolleyball.co.nz
maoribasketball.com
marlboroughnetball.org.nz
marlboroughtrampingclub.co.nz
membermanager.co.nz
metrofootball.org.nz
mff.nz
mitre10park.co.nz
mountsports.co.nz
nzteachersgames.co.nz
otakisportsclub.co.nz
parklandsrugby.co.nz
patoka.school.nz
pbhockey.co.nz
pioneerfishingclub.co.nz
polo.org.nz
ponsonbyrugby.co.nz
porthillunited.co.nz
prebbleton.com
referees.co.nz
rotoruaunited.co.nz
shirleyrugby.co.nz
sked.co.nz
soulutionzsports.nz
southcanterbury.basketball
sportsafe.co.nz
sporty.org.nz
sportycrm.co.nz
sportycrm.com
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
taradaleint.school.nz
volleysouth.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wanakafootball.nz
wdta.org.nz
whangareibridgeclub.nz

Other certificates including the domain name freyberg.ac.nz

(limited to 100 certificates)
www.giafc.co.nz
mail.freyberg.ac.nz
www.sportsground.com
fdmc.school.nz
mail.freyberg.ac.nz
arrowtownrugby.co.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
international.freyberg.ac.nz
sporty.org.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
sporty.org.nz
mail.freyberg.ac.nz
mail.freyberg.ac.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
mail.freyberg.ac.nz

Certificate

The complete raw certificate details for freyberg.ac.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2bYPFG6CQJDKqvgBepd
xHvK3la9VyUbtfJLfB/JHu7AKo2BnklzbyzoHK7saEu6RTyWgWKG5dLoOLNvRd9e
ry/hm3DjB/Ogs7RrvnfjGkEG1ixpYlkUlGdCX/ZU6HXgdoC8KaMwlNJOL1utq57Q
bWXrfE4+i5q23v4hRtGktjZHULzk/IcFfyd8u1JeTFG+vjzTKG4tdkiiNCiwuaDp
nbVix5AqVAPs85LLVgYrLsuS13Leyshyt2RJCoNhVWoJLtYMsTh7TB0OH2D8rBBh
tJ7SahLT5a2NWyhmTu7S0XuRkKC5SPRHiCZYZgjrCP1AWI0P6eidLJvjnEcRq+VO
IwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280178542022431182532874103484825415507824
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-29 07:44:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 07:44:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'freyberg.ac.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20627558306600042247140293543595993056371308461015550283167033588331609461762284864059466124552934407799849550726758831752977202587920563981334321050253049693308658585991822095976510422361890505057122555120036789192097021587907558527934282047338190867309311296956788380404732657021491592953893213000520156866950773937136042089068878704182716746671245756332289718073295686090666864231672496380111681681552211413104499543393785201442765908471905090867608100479499973622002268229775760002684346743396875831057594602575278517937612195478290307122138145075275722284405347100018967656546425530673502733554689127643829587491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7b3e4142fa7b8f3d1e4a519bdfe75365cb88272
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1851 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonesyyouthfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f20077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016ff07917c50000040300483046022100e350cda32bb761b8abb987a5a18571d3f784f85832be2afa3ce4b4b947470067022100ee784ce6c1dbc7a3d59bc7b9b433c75b8f903a532d5864aaf1a19c3f9717d177007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ff07917f10000040300483046022100abdfbf68f5a3183593b280b58e5f262f0e0376fde5dac19e6a7ff9db96ccd542022100a4640e2d4d92aeb19c56446a67acf58dc23fad7a4575c7c6835ce69f4527192f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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