birkdalenorth.school.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:fe:25:0d:ac:00:db:a0:9c:a8:cb:d1:d8:d2:9b:4f:7c:41 was issued on by Let's Encrypt.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=birkdalenorth.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:fe:25:0d:ac:00:db:a0:9c:a8:cb:d1:d8:d2:9b:4f:7c:41
Serial Number (int): 347817831417544735712797697472902416268353
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: eb:58:25:07:2c:ba:f8:fa:33:d7:9d:43:bc:3e:61:16:5a:9b:6c:75
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c2:41:06:25:b6:19:12:d9:67:ff:dc:34:d0:74:30:5f:4f:f4:bf:20
Fingerprint (sha256): cb:09:18:9d:be:26:c6:bc:0e:bb:d8:8c:03:22:bc:1b:12:b5:d8:01:08:43:a0:b5:c4:93:3f:1b:7e:00:0c:59

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate birkdalenorth.school.nz

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for birkdalenorth.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashhurst.school.nz
awhitu.school.nz
birkdalenorth.school.nz
cannington.school.nz
cpanel.two.skoolsites.co.nz
dargavilleprimary.school.nz
foxton.school.nz
geraldine.school.nz
geraldineprimary.school.nz
glenavy.school.nz
glenmassey.school.nz
hns.school.nz
horahoracambridge.school.nz
ilminster.school.nz
kahutara.school.nz
kingsgate.school.nz
knapdale.school.nz
lichfield.school.nz
mangatangi.school.nz
matamataintermediate.school.nz
ngaruawahia.school.nz
norsewood.school.nz
omarama.school.nz
ongarue.school.nz
otaki.school.nz
peninsulaprimary.school.nz
two.skoolsites.co.nz
www.ashhurst.school.nz
www.awhitu.school.nz
www.birkdalenorth.school.nz
www.cannington.school.nz
www.dargavilleprimary.school.nz
www.foxton.school.nz
www.geraldine.school.nz
www.geraldineprimary.school.nz
www.glenavy.school.nz
www.glenmassey.school.nz
www.hns.school.nz
www.horahoracambridge.school.nz
www.ilminster.school.nz
www.kahutara.school.nz
www.kingsgate.school.nz
www.knapdale.school.nz
www.lichfield.school.nz
www.mangatangi.school.nz
www.matamataintermediate.school.nz
www.ngaruawahia.school.nz
www.norsewood.school.nz
www.omarama.school.nz
www.ongarue.school.nz
www.otaki.school.nz
www.peninsulaprimary.school.nz
www.two.skoolsites.co.nz

Other certificates including the domain name birkdalenorth.school.nz

(limited to 100 certificates)
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
staging.birkdalenorth.school.nz
birkdalenorth.school.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
staging.birkdalenorth.school.nz
birkdalenorth.school.nz
birkdalenorth.school.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
kiwischools.co.nz
staging.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
staging.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
kiwischools.co.nz
www.matamataintermediate.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
mossburn.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
kiwischools.co.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
kiwischools.co.nz
www.lichfield.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
birkdalenorth.kiwischools.com
etoiledunord.birkdalenorth.school.nz
staging.birkdalenorth.school.nz
kiwischools.co.nz
birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
etoiledunord.birkdalenorth.school.nz
skoolsites.co.nz
etoiledunord.birkdalenorth.school.nz
skoolsites.co.nz
staging.birkdalenorth.school.nz
staging.birkdalenorth.school.nz

Certificate

The complete raw certificate details for birkdalenorth.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbGTqeKJV8Ags7ZnW8WA
wPodmm2M++MNVz6s0pw5unORVu0KgqZ2Bg/bO0FCWI1u1KpjmP60sruvh0SG+r1D
xKNj0DcHyE4+pLenVGADB9f2rXxUh/Ehaxq3fxuyC+3XVG9KlPHEGT6jBoEBz4q/
+uXfE0ALwodAd7JWcxAQdIS0jjrLVpA0G5DcrIeQ/QG9iolFApp2016MHSLfa7TY
FuslcxfOn8vGFhpNdV67Pfm0sFvz7W57EmTES5QmwxZ0S+J5Nq9QsQHj6XDqIJg5
s3CgOnVYVk4Kz8TGtn1LvnqiBwsep27oWUOUFCnNd4KRqfCvwVm1Zpf3ZP0dls99
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347817831417544735712797697472902416268353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-04 22:41:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-02 22:41:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'birkdalenorth.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23946606027727269564379531729058950496898537975721179222334183475210780090330922747710741574012263005078408944277021841080257823685317265609798884982498157425863813536442484210260269890296236822696704615595233613586014244975831556648974119039907122503589280448362308449861796201035234364250447224408300882626751870296619465764615400167781203222713076641622570024755558375707637042729758618219616679430187635866438959981734093112635410600133793585141612181163933564446480428322897341310547817243698818413293596477101584526058048632648636065603082010853525155455610956736515412426912940982745170244941537106832569368043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eb5825072cbaf8fa33d79d43bc3e61165a9b6c75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1281 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f45fbfff9000004030047304502203e792cda2e7e83e7ca3dcf546b9ab6ebf70dbc03009b88802c9a2441eb238be1022100e4a92d307b86ba0ef078d7a8214dc7ceb9b5c121e3800c0b79a8519862d4a915007500dfe156ebaa05afb59c0f86718da8c0324eae56d96ea7f5a56a01d1c13bbe525c0000018f45fc00c20000040300463044022030aa1e013f0ca4fc776bf7106bdcf37aecec0289df063f6b14071b5d43cabd2702200b11106d55092320668ef79cf38d351d1f1d06a23ec52536a06c4ac7ac500463
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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