www.mysporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:ca:74:01:23:94:90:36:64:3b:d5:e5:81:6d:f4:a6:8f:bd was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.mysporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ca:74:01:23:94:90:36:64:3b:d5:e5:81:6d:f4:a6:8f:bd
Serial Number (int): 417340378206533200758850277597629164982205
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 65:d4:87:f5:e1:1f:e5:1b:95:e2:a3:2a:17:11:7f:2d:4d:6d:c7:18
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e1:fd:1c:09:04:37:fa:c0:91:85:03:00:6e:4d:f9:c4:80:51:57:ad
Fingerprint (sha256): ca:6e:5a:e7:a1:ac:57:0f:f9:ec:07:ff:2e:a6:5e:8d:38:47:3a:e5:6e:84:9d:8d:9f:a6:6b:3e:e2:ef:fc:1b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.mysporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mysporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kaiapoinetball.co.nz
www.avalonrugby.co.nz
www.bophockey.co.nz
www.brownsbaybowls.org.nz
www.canterburywaterpolo.org.nz
www.cathcollege.school.nz
www.centralcitybaseball.org.nz
www.darfieldrugby.co.nz
www.eastcoastexpo.co.nz
www.greertonmaristnz.org.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hawkesbaysquash.co.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.hpnc.org.nz
www.kaiapoinetball.co.nz
www.kaitaiacollege.school.nz
www.kjcc.org.nz
www.magpies.co.nz
www.mandevillesports.co.nz
www.maraetaitennis.co.nz
www.marsdensport.school.nz
www.merivalepap.co.nz
www.mgcarclubcanterbury.nz
www.montressors.co.nz
www.mysporty.co.nz
www.netballwaitakere.co.nz
www.northcanterburyrugby.co.nz
www.northharbourwaterpolo.co.nz
www.northshorerugby.co.nz
www.nzssfootball.co.nz
www.ojcc.org.nz
www.primarysportscanterbury.org.nz
www.purc.co.nz
www.rowandale.school.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sportslink.org.nz
www.sportspark.co.nz
www.sportspay.co.nz
www.taupohockey.co.nz
www.taurangasports.co.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatogolf.co.nz
www.waikatogolf.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name mysporty.co.nz

(limited to 100 certificates)
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz
www.mysporty.co.nz

Certificate

The complete raw certificate details for www.mysporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJxjCCCK6gAwIBAgISBMp0ASOUkDZkO9XlgW30po+9MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDAxMDgxOTU5MjNaFw0yNDA0MDcxOTU5MjJaMB0xGzAZBgNVBAMT
End3dy5teXNwb3J0eS5jby5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAJpWlTxKi3B+x1SqNsXnO6vJA+kH59FznYnvKMSeyCxpMS/luihWD4rL22wl
WxmE1C3fE+0xMfy1EnVjz2Mq6PXRS44SOj1bzzk36MeNN6T8aVotobmIAXDiccm7
huHrqOdSRlR90eP4PhJK4JlEF3+jVCkX6tK+vO9o4y+bkQvKVHDjFcaJJdsemw4G
WBIxA6CjGwc78nchZRZOw+yJtj0PYDBqMiipK84EruwcEYos7CPfvK34RBXTZRs7
tp/uqIZOFJARw3uIJl7mIoIwatixecIh/BCaSHV1uPK957bkg6EpTOxr4gAmO2UU
RXh6Ifi3bBygrwMYcGQZSDkr5FECAwEAAaOCBukwggblMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd
BgNVHQ4EFgQUZdSH9eEf5RuV4qMqFxF/LU1txxgwHwYDVR0jBBgwFoAUFC6zF7dY
VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw
Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy
Lm9yZy8wggTvBgNVHREEggTmMIIE4oIUa2FpYXBvaW5ldGJhbGwuY28ubnqCFXd3
dy5hdmFsb25ydWdieS5jby5ueoITd3d3LmJvcGhvY2tleS5jby5ueoIZd3d3LmJy
b3duc2JheWJvd2xzLm9yZy5ueoIed3d3LmNhbnRlcmJ1cnl3YXRlcnBvbG8ub3Jn
Lm56ghl3d3cuY2F0aGNvbGxlZ2Uuc2Nob29sLm56gh53d3cuY2VudHJhbGNpdHli
YXNlYmFsbC5vcmcubnqCF3d3dy5kYXJmaWVsZHJ1Z2J5LmNvLm56ghd3d3cuZWFz
dGNvYXN0ZXhwby5jby5ueoIbd3d3LmdyZWVydG9ubWFyaXN0bnoub3JnLm56giB3
d3cuaGFzdGluZ3NydWdieWFuZHNwb3J0cy5jby5ueoIgd3d3Lmhhd2tlc2JheXJ1
Z2J5cmVmZXJlZXMuY28ubnqCGXd3dy5oYXdrZXNiYXlzcXVhc2guY28ubnqCE3d3
dy5oYm1hZ3BpZXMuY28ubnqCD3d3dy5oYnJmdS5jby5ueoIOd3d3LmhicnUuY28u
bnqCEXd3dy5obmkuc2Nob29sLm56gg93d3cuaHBuYy5vcmcubnqCGHd3dy5rYWlh
cG9pbmV0YmFsbC5jby5ueoIcd3d3LmthaXRhaWFjb2xsZWdlLnNjaG9vbC5ueoIP
d3d3LmtqY2Mub3JnLm56ghF3d3cubWFncGllcy5jby5ueoIad3d3Lm1hbmRldmls
bGVzcG9ydHMuY28ubnqCGHd3dy5tYXJhZXRhaXRlbm5pcy5jby5ueoIad3d3Lm1h
cnNkZW5zcG9ydC5zY2hvb2wubnqCFXd3dy5tZXJpdmFsZXBhcC5jby5ueoIad3d3
Lm1nY2FyY2x1YmNhbnRlcmJ1cnkubnqCFXd3dy5tb250cmVzc29ycy5jby5ueoIS
d3d3Lm15c3BvcnR5LmNvLm56ghp3d3cubmV0YmFsbHdhaXRha2VyZS5jby5ueoIe
d3d3Lm5vcnRoY2FudGVyYnVyeXJ1Z2J5LmNvLm56gh93d3cubm9ydGhoYXJib3Vy
d2F0ZXJwb2xvLmNvLm56ghl3d3cubm9ydGhzaG9yZXJ1Z2J5LmNvLm56ghZ3d3cu
bnpzc2Zvb3RiYWxsLmNvLm56gg93d3cub2pjYy5vcmcubnqCInd3dy5wcmltYXJ5
c3BvcnRzY2FudGVyYnVyeS5vcmcubnqCDnd3dy5wdXJjLmNvLm56ghd3d3cucm93
YW5kYWxlLnNjaG9vbC5ueoIPd3d3LnNjcmZ1LmNvLm56gh93d3cuc291dGhsYW5k
c2Nob29sc3BvcnQub3JnLm56ghV3d3cuc3BvcnRzbGluay5vcmcubnqCFHd3dy5z
cG9ydHNwYXJrLmNvLm56ghN3d3cuc3BvcnRzcGF5LmNvLm56ghV3d3cudGF1cG9o
b2NrZXkuY28ubnqCGHd3dy50YXVyYW5nYXNwb3J0cy5jby5ueoIRd3d3LnRvdWNo
bnouY28ubnqCDnd3dy50b3VjaG56Lm56ghR3d3cudHVyYm90b3VjaC5jby5ueoIV
d3d3LndhaWthdG9nb2xmLmNvLm56ghJ3d3cud2Fpa2F0b2dvbGYubnqCHXd3dy53
ZWxsaW5ndG9uc29mdGJhbGwub3JnLm56MBMGA1UdIAQMMAowCAYGZ4EMAQIBMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB
2bu/qznYhHMAAAGM6t96YAAABAMARzBFAiEAwPZvX1ou2Vs154W+uMHw2x4KAPIF
2xaFPiC/K1NU28kCICHZzJSwob4o7o1uFKvMx08oKRJ4huHzDsYbE6HsoxPUAHcA
ouK/1h7eLy8HoNZObTen3GVDsMa1LqLat4r4mm31F9gAAAGM6t96XwAABAMASDBG
AiEA3x6sdj6Ekf1seiJ88bbH4x8vRPiNR3rRosZzZL4iCPoCIQCV+cFJ6DxqLy9k
ChU2O21ePghWNNs8X0yGfqntfJ9h9zANBgkqhkiG9w0BAQsFAAOCAQEApyJ2VNNf
XpcGnIAp5a+TI9GUfbu2N7l6tnAuidhvSw+2NiuRDLnH2Qi5Kngmd8XqlnC6QfZU
mf0h1GgSBo4H8T8CcJv/AdCkkKTzUCRaNBehTZw+zxMhg7nyunqrUfk3bddncLUM
augagEge3j3EQB/+5psPEovTL3jsJ4xXSz1qT356M/I03nrKGh92RpKTFB4tKH/C
D7ZaFEIhavyq4ePieENFMFdeOv0JZGniuQWktQPLnjrEGomhIrkVJr0UzrnyRjcy
DbUiDD/6Y2nbRJLSLwQSiaa9BssyOD2Cwcikd9ZOXd6dcasGMiMT6eYqxc70HvGF
QMotbkUT+5dTpQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlaVPEqLcH7HVKo2xec7
q8kD6Qfn0XOdie8oxJ7ILGkxL+W6KFYPisvbbCVbGYTULd8T7TEx/LUSdWPPYyro
9dFLjhI6PVvPOTfox403pPxpWi2huYgBcOJxybuG4euo51JGVH3R4/g+EkrgmUQX
f6NUKRfq0r6872jjL5uRC8pUcOMVxokl2x6bDgZYEjEDoKMbBzvydyFlFk7D7Im2
PQ9gMGoyKKkrzgSu7BwRiizsI9+8rfhEFdNlGzu2n+6ohk4UkBHDe4gmXuYigjBq
2LF5wiH8EJpIdXW48r3ntuSDoSlM7GviACY7ZRRFeHoh+LdsHKCvAxhwZBlIOSvk
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 417340378206533200758850277597629164982205
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-08 19:59:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 19:59:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mysporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19483394609308346489906333851101180915933432518464723110138669620476830577737027506932161070158440165597196925749938809570223849466120922062476894398098422081747745601750246274820337277934215864805840644294930687891003422828317993694571319584784077523887131978762366155141361236619985479248629116042529632474107913129884403745484646898322187835711834887248538160783165579385164391256759004699759982034502028107001388062009548845746404405677387166590760743065588425962045492407648210397554694093851828476810472537415645652557678961651663222798887685678323430193007617777684298066738652856301626190577826774410848887889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65d487f5e11fe51b95e2a32a17117f2d4d6dc718
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1254 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bophockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonmaristnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaiapoinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaitaiacollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maraetaitennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mgcarclubcanterbury.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northshorerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportslink.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taurangasports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatogolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ceadf7a600000040300473045022100c0f66f5f5a2ed95b35e785beb8c1f0db1e0a00f205db16853e20bf2b5354dbc9022021d9cc94b0a1be28ee8d6e14abccc74f2829127886e1f30ec61b13a1eca313d4007700a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018ceadf7a5f0000040300483046022100df1eac763e8491fd6c7a227cf1b6c7e31f2f44f88d477ad1a2c67364be2208fa02210095f9c149e83c6a2f2f640a15363b6d5e3e085634db3c5f4c867ea9ed7c9f61f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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