sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:c2:fd:c8:27:db:9d:ce:d6:ee:d0:da:07:18:34:fa:92:b2 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c2:fd:c8:27:db:9d:ce:d6:ee:d0:da:07:18:34:fa:92:b2
Serial Number (int): 414801256860422120513052271166291468522162
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 3d:80:e0:18:14:0f:01:e9:1b:80:48:29:49:fb:f5:05:4e:ef:3f:3d
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 31:b8:05:44:9b:5d:ba:a1:a6:bb:d6:c3:8d:ba:57:b4:85:ab:7c:9d
Fingerprint (sha256): d9:25:a4:c3:b5:2d:04:bd:b3:7a:4a:ab:39:d3:d7:bb:a4:7e:a6:f6:27:8a:97:0f:ef:a3:db:e6:11:31:37:54

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnz.com
bowlssouthland.co.nz
bowlswestcoast.org.nz
brooklyncroquetclub.org
centralfootball.co.nz
centralfootball.org.nz
cmsport.co.nz
collegerifles.co.nz
diamondsportnz.co.nz
diamondsports.co.nz
diamondsportsnz.co.nz
footballsouth.co.nz
hbcc.org.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hpbaseball.co.nz
hrc.org.nz
karakasportspark.co.nz
linfield.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nzsra.org.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
schoolground.co.nz
softballauckland.org.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
sporty.co.nz
teeball.co.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waibopfootball.co.nz
waihoraclaytarget.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohNis0ymUIxjMeB9Hg8B
L0Iv8mEL4/7PqWLT5cp/4ztyphZ1FQbkzHuLrYG9EfGgrY4mVXrcQHS2xpbN0yg6
idk4CtcJhdY3bwQe809HplQ548rKzKRGlnXc8GmlCzP+pfNk4zltBq3Aqj5+kFVi
32YLuq9jp1KNaazx19a/lgUWxscsvXy4GO02O6kZ4QefOpGroqFrH7wLWKbUtx/X
L/5US2N/7TnK2uRszSkhXjPzeC+o4wcYEJVf/CxeTKykXrspeuquTCqCAQXZrE3D
YcyOBbvsquXxjSoHAVdZ/KmyUgwTP9jFgR+cOcgtxTApdHf6Velu0Ap8Cel0KvSs
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 414801256860422120513052271166291468522162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 19:38:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 19:38:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20460164774696158034691381498523269475121651855132590390939525531562149566674431239150445863684194176888435054265379271447803787841886478646062855153358506538196044274178999018288180772885908931142248175221744612551463339851999104071828911899879061858802760595402100680321357783101194274686367802670583038033775310885340171688803367723990238030828866825417523383201208355006760194635392911014742087304106916115380131431602135866491649800716854830133690521852205796533643890336155657738333173349778686467575342564576537882200777457760664794155595251765388981431357430162510896537970589081953524685507809977031147695133
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3d80e018140f01e91b80482949fbf5054eef3f3d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bc541c7bd0000040300463044021f152720e2b90e3f097180f15aedfd0e836aa1749f1907c8c566f21abaefe281022100c3f58383fba394b3335cd35d34922dac0a685e942019c941235d6aa55f8215ca007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc541c7b10000040300483046022100a0af28a83ba8318ff56304140eafea44abd9529c875eacefa4b1170369ef490a02210081989b62bee5036b51a79b586c69b3ce30838688af7a3442161705a554eab415
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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