whangareirowingclub.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1d:ce:68:3c:5b:80:e3:a0:49:ae:e7:36:ae:77:0b:d5:1e was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=whangareirowingclub.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1d:ce:68:3c:5b:80:e3:a0:49:ae:e7:36:ae:77:0b:d5:1e
Serial Number (int): 271479408626187163944455431075351461877022
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:98:82:a7:bc:a1:09:8b:ca:f8:6f:ad:71:5c:fd:58:7e:1a:ce:81
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:5d:c4:47:9a:85:8a:0f:79:cf:7e:ac:ca:a0:03:c3:61:e0:4a:6b
Fingerprint (sha256): ca:ec:76:56:9d:69:b7:ef:7b:e5:ff:70:b5:0d:46:da:72:e9:f8:ad:57:41:67:66:e1:69:1a:50:71:7a:bd:85

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate whangareirowingclub.org.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for whangareirowingclub.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
centralfootball.co.nz
cmsport.co.nz
collegerifles.co.nz
countiesbadminton.co.nz
dairyflattennis.co.nz
diamondblacks.co.nz
diamondblacks.com
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
footballsouth.co.nz
gameoftwohalfwits.com
ghryc.co.nz
glenfieldbowls.co.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hphawks.com
hrc.org.nz
keirunga.org.nz
kereru.school.nz
kiwiball.co.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
osa.org.nz
poolburn.school.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
runwalkseries.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
tearohagolfclub.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waihibeachtennisclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
waitematarowing.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name whangareirowingclub.org.nz

(limited to 100 certificates)
www.sportsground.com
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
sporty.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
sporty.co.nz
manurewamets.co.nz
www.baseballnewzealand.org
www.schoolground.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
whangareirowingclub.org.nz
sporty.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for whangareirowingclub.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRnDsxl99j0yJrAVgHFZ
WKkqC/orRoH1ZhTnq4+H2dIEFY4c7a8hY3Qmt/TWuL0zwatHwXmX6EDbtB8A6b74
N3NnFrjtz/U0QDQVDLS9PJc27AvxfwvAEp7Q23tZVg1Y53B1IsYwgCu95/EE05g0
IOk/nEPJQJ15ExkCLM6zr9CXo53ME3aidSDLw/By55SjCkFCMcKCmvNOjGw322Kc
MqdaHAWZ5oG4U/jLRD/NNg0yGKB1cakxKvvLr8cQBBaL7XEDkNjt+YaK5fQ14NE+
HoLEvWF5mTtISCPr6azdw9vUd9qq8/GlsK8bnHhMM1YWT7Z8H5sNKvhMedk5rDnW
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271479408626187163944455431075351461877022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 00:17:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 00:17:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'whangareirowingclub.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20337072024134816159714773612220506459439210801405896432470971816170559406275423323013188353401081008704480029258901688411692909031486532006041576437664508657510462454199410924219248496863037256278860214384200505032688074828321256558713453780815432200309132245102360882944375219393033704854472867847901162186816664473611498822657108344622935485425287179286982884124733276931518315419628717689748697585200849743115715499064838509240068134129019644755439568454327086234512122526199750137634171833731089390253264269237567308046285958667713141431405630250572180226623145238385128986349077637509337790697892108397702665953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d49882a7bca1098bcaf86fad715cfd587e1ace81
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1935 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwiball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675d0ae18d0000040300483046022100fd301647d8d3c7d3595839f610faf1d7cf1f37968f28e81a41cb5d6fa826c312022100e859b106403ca9a84dc86548cbbbe69290f83f46a181f9dbfa16f97f8d026f0a007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675d0ae1d700000403004730450220316935fb3876bceae533bf8208d214283bca849bef6f746dbb7a5b090b92d657022100f7994270eb5acfe1457a4003fbd6523acb9078d0e8d6ece64bfad91c8fd89958
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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