www.lichfield.school.nz

Issued by R3

About this certificate

This digital certificate with serial number 03:35:a9:a0:d0:ab:70:39:16:eb:ca:87:23:1f:af:0d:9f:61 was issued on by Let's Encrypt.

With 67 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.lichfield.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:35:a9:a0:d0:ab:70:39:16:eb:ca:87:23:1f:af:0d:9f:61
Serial Number (int): 279597297773199439545971860717356616359777
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: cb:1e:b5:6a:c7:29:13:f3:42:32:dc:3f:06:2d:46:8e:c3:e0:fa:33
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): fa:a0:c4:fc:9b:21:b6:9d:1e:50:41:48:ab:87:dc:cc:76:03:48:3f
Fingerprint (sha256): da:4a:41:ae:7c:62:e9:f8:11:b5:d4:dc:09:a9:94:88:b4:84:e3:49:bd:74:2e:63:bb:23:73:0a:df:e2:2a:be

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.lichfield.school.nz

67

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lichfield.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashhurst.school.nz
awhitu.school.nz
birkdalenorth.school.nz
cannington.school.nz
cpanel.two.skoolsites.co.nz
dargavilleprimary.school.nz
foxton.school.nz
geraldine.school.nz
geraldineprimary.school.nz
glenavy.school.nz
glenmassey.school.nz
gorgeroad.school.nz
hillside.school.nz
hns.school.nz
horahoracambridge.school.nz
ilminster.school.nz
kahutara.school.nz
kamoprimary.school.nz
kingsgate.school.nz
knapdale.school.nz
lichfield.school.nz
mangatangi.school.nz
matamataintermediate.school.nz
matamataprimary.school.nz
mimi.school.nz
mmps.school.nz
ngaruawahia.school.nz
norsewood.school.nz
omarama.school.nz
ongarue.school.nz
oruaiti.school.nz
otaki.school.nz
peninsulaprimary.school.nz
two.skoolsites.co.nz
www.ashhurst.school.nz
www.awhitu.school.nz
www.birkdalenorth.school.nz
www.cannington.school.nz
www.dargavilleprimary.school.nz
www.foxton.school.nz
www.geraldine.school.nz
www.geraldineprimary.school.nz
www.glenavy.school.nz
www.glenmassey.school.nz
www.gorgeroad.school.nz
www.hillside.school.nz
www.hns.school.nz
www.horahoracambridge.school.nz
www.ilminster.school.nz
www.kahutara.school.nz
www.kamoprimary.school.nz
www.kingsgate.school.nz
www.knapdale.school.nz
www.lichfield.school.nz
www.mangatangi.school.nz
www.matamataintermediate.school.nz
www.matamataprimary.school.nz
www.mimi.school.nz
www.mmps.school.nz
www.ngaruawahia.school.nz
www.norsewood.school.nz
www.omarama.school.nz
www.ongarue.school.nz
www.oruaiti.school.nz
www.otaki.school.nz
www.peninsulaprimary.school.nz
www.two.skoolsites.co.nz

Other certificates including the domain name lichfield.school.nz

(limited to 100 certificates)
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
www.lichfield.school.nz
www.lichfield.school.nz
skoolsites.co.nz
www.lichfield.school.nz
www.lichfield.school.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.lichfield.school.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
www.lichfield.school.nz
www.lichfield.school.nz
birkdalenorth.school.nz
skoolsites.co.nz
www.lichfield.school.nz
www.lichfield.school.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz
www.lichfield.school.nz

Certificate

The complete raw certificate details for www.lichfield.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILHDCCCgSgAwIBAgISAzWpoNCrcDkW68qHIx+vDZ9hMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yNDA1MDcyMjQxMjhaFw0yNDA4MDUyMjQxMjdaMCIxIDAeBgNVBAMT
F3d3dy5saWNoZmllbGQuc2Nob29sLm56MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAkpFFXPZ2C33eAI9RvnEV89Xj9QfZsMJfBZS348zuDpYKivnH7C97
zd9LZu31+XWsn26BjYlpo6jcRe0eZ+J4xFeWhZ65Y8qCyA1q0Z7Q+pDiuinidur0
WSKO1xWA6T14knAlYvmPZ0mdON3xmuCL4kJjpBlp+akIkMFTf0gEjcybGRqAy+av
swcyr+jVdSPJ0Cc4MxApUyJ0CPPMT/zOwsttoVPzlz1J5PP6/PDnadjUlusLWqmh
bgQhN4aoN6nrcopOAoDpW9i3x+cEyLvzKnjvZd66GmQwcwMr9Gyethg8V8F6u5cp
z0H78TMbaFE55FhOc/mYZVOfVffrAzDF0wIDAQABo4IIOjCCCDYwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8E
AjAAMB0GA1UdDgQWBBTLHrVqxykT80Iy3D8GLUaOw+D6MzAfBgNVHSMEGDAWgBQU
LrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGG
FWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmku
bGVuY3Iub3JnLzCCBkIGA1UdEQSCBjkwggY1ghJhc2hodXJzdC5zY2hvb2wubnqC
EGF3aGl0dS5zY2hvb2wubnqCF2JpcmtkYWxlbm9ydGguc2Nob29sLm56ghRjYW5u
aW5ndG9uLnNjaG9vbC5ueoIbY3BhbmVsLnR3by5za29vbHNpdGVzLmNvLm56ghtk
YXJnYXZpbGxlcHJpbWFyeS5zY2hvb2wubnqCEGZveHRvbi5zY2hvb2wubnqCE2dl
cmFsZGluZS5zY2hvb2wubnqCGmdlcmFsZGluZXByaW1hcnkuc2Nob29sLm56ghFn
bGVuYXZ5LnNjaG9vbC5ueoIUZ2xlbm1hc3NleS5zY2hvb2wubnqCE2dvcmdlcm9h
ZC5zY2hvb2wubnqCEmhpbGxzaWRlLnNjaG9vbC5ueoINaG5zLnNjaG9vbC5ueoIb
aG9yYWhvcmFjYW1icmlkZ2Uuc2Nob29sLm56ghNpbG1pbnN0ZXIuc2Nob29sLm56
ghJrYWh1dGFyYS5zY2hvb2wubnqCFWthbW9wcmltYXJ5LnNjaG9vbC5ueoITa2lu
Z3NnYXRlLnNjaG9vbC5ueoISa25hcGRhbGUuc2Nob29sLm56ghNsaWNoZmllbGQu
c2Nob29sLm56ghRtYW5nYXRhbmdpLnNjaG9vbC5ueoIebWF0YW1hdGFpbnRlcm1l
ZGlhdGUuc2Nob29sLm56ghltYXRhbWF0YXByaW1hcnkuc2Nob29sLm56gg5taW1p
LnNjaG9vbC5ueoIObW1wcy5zY2hvb2wubnqCFW5nYXJ1YXdhaGlhLnNjaG9vbC5u
eoITbm9yc2V3b29kLnNjaG9vbC5ueoIRb21hcmFtYS5zY2hvb2wubnqCEW9uZ2Fy
dWUuc2Nob29sLm56ghFvcnVhaXRpLnNjaG9vbC5ueoIPb3Rha2kuc2Nob29sLm56
ghpwZW5pbnN1bGFwcmltYXJ5LnNjaG9vbC5ueoIUdHdvLnNrb29sc2l0ZXMuY28u
bnqCFnd3dy5hc2hodXJzdC5zY2hvb2wubnqCFHd3dy5hd2hpdHUuc2Nob29sLm56
ght3d3cuYmlya2RhbGVub3J0aC5zY2hvb2wubnqCGHd3dy5jYW5uaW5ndG9uLnNj
aG9vbC5ueoIfd3d3LmRhcmdhdmlsbGVwcmltYXJ5LnNjaG9vbC5ueoIUd3d3LmZv
eHRvbi5zY2hvb2wubnqCF3d3dy5nZXJhbGRpbmUuc2Nob29sLm56gh53d3cuZ2Vy
YWxkaW5lcHJpbWFyeS5zY2hvb2wubnqCFXd3dy5nbGVuYXZ5LnNjaG9vbC5ueoIY
d3d3LmdsZW5tYXNzZXkuc2Nob29sLm56ghd3d3cuZ29yZ2Vyb2FkLnNjaG9vbC5u
eoIWd3d3LmhpbGxzaWRlLnNjaG9vbC5ueoIRd3d3Lmhucy5zY2hvb2wubnqCH3d3
dy5ob3JhaG9yYWNhbWJyaWRnZS5zY2hvb2wubnqCF3d3dy5pbG1pbnN0ZXIuc2No
b29sLm56ghZ3d3cua2FodXRhcmEuc2Nob29sLm56ghl3d3cua2Ftb3ByaW1hcnku
c2Nob29sLm56ghd3d3cua2luZ3NnYXRlLnNjaG9vbC5ueoIWd3d3LmtuYXBkYWxl
LnNjaG9vbC5ueoIXd3d3LmxpY2hmaWVsZC5zY2hvb2wubnqCGHd3dy5tYW5nYXRh
bmdpLnNjaG9vbC5ueoIid3d3Lm1hdGFtYXRhaW50ZXJtZWRpYXRlLnNjaG9vbC5u
eoIdd3d3Lm1hdGFtYXRhcHJpbWFyeS5zY2hvb2wubnqCEnd3dy5taW1pLnNjaG9v
bC5ueoISd3d3Lm1tcHMuc2Nob29sLm56ghl3d3cubmdhcnVhd2FoaWEuc2Nob29s
Lm56ghd3d3cubm9yc2V3b29kLnNjaG9vbC5ueoIVd3d3Lm9tYXJhbWEuc2Nob29s
Lm56ghV3d3cub25nYXJ1ZS5zY2hvb2wubnqCFXd3dy5vcnVhaXRpLnNjaG9vbC5u
eoITd3d3Lm90YWtpLnNjaG9vbC5ueoIed3d3LnBlbmluc3VsYXByaW1hcnkuc2No
b29sLm56ghh3d3cudHdvLnNrb29sc2l0ZXMuY28ubnowEwYDVR0gBAwwCjAIBgZn
gQwBAgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQA/F0tP1yJHWJQdZRyEvg0S
7ZA3fx+FauvBvyiF7PhkbgAAAY9Vbv8OAAAEAwBGMEQCIEx1w7vnXKVkFSIDcnck
J5hRTRu8CLQ0TvAa6DWUcMK/AiBx7dsOkndT2+HqthMPw/pn03Q62jnDhHvbKbcd
MwVARgB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABj1Vu/wkA
AAQDAEcwRQIgYKav0+FAMrMUbZwCHlCRkGN0TupbKOJSVj3/1T0sWV4CIQCHA+vp
eL/IbOK2klMsFzKNQ7+j64DTVAeWEHB0pG7WVTANBgkqhkiG9w0BAQsFAAOCAQEA
do5v6+xC80TPSxBpX8hnhR9WTWSBZ9CunN8dz3v/IXTH7XgcMFPVUfD3iewTjKnP
liMnuODkmELAISYC66R1iFlNY0o28BBlbMMt1E0dOWtWi0JHVfsErS1IopvQWDzj
OHBHzXdfMEgV24fF5yE4tXuZOo0RnRayMg4cgj6EmADtGhU6MxJVGhkOXI4Ye9F1
5dDrA4QB5uTae3VXEs0HgRx6+gPe9UvKjyeahPWA7EOgIOgLXBTTFuaU75o1zRIN
/cG630uEBpEbjUybK0Jdvje5WYJXFJ6NwJdENE81pBZB+xSgxNU3MP7c9Gsq2Wqx
5+y9j1clFtr1ZQiXTO/IRg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpFFXPZ2C33eAI9RvnEV
89Xj9QfZsMJfBZS348zuDpYKivnH7C97zd9LZu31+XWsn26BjYlpo6jcRe0eZ+J4
xFeWhZ65Y8qCyA1q0Z7Q+pDiuinidur0WSKO1xWA6T14knAlYvmPZ0mdON3xmuCL
4kJjpBlp+akIkMFTf0gEjcybGRqAy+avswcyr+jVdSPJ0Cc4MxApUyJ0CPPMT/zO
wsttoVPzlz1J5PP6/PDnadjUlusLWqmhbgQhN4aoN6nrcopOAoDpW9i3x+cEyLvz
KnjvZd66GmQwcwMr9Gyethg8V8F6u5cpz0H78TMbaFE55FhOc/mYZVOfVffrAzDF
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 279597297773199439545971860717356616359777
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-07 22:41:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-05 22:41:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lichfield.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18502428300267608153691050355577686907664205681226980267454901479522712284472473840895716784245596245264792486755005367682570072873678251076421283768412379366817589051222385724028656385105468053216465175236261850195227487150159127665729488543315748127235460040042777203943201936280690992206985584282892598159634972881076034425795532553795079983448944063401521935798890755856923064417820243644199339106952887658332786493612434549610472134771520454021005895050612947349804757181267807041981924008483243334666562220741741174693833033018693833889180084935227216798430507667643113758751915897337993930391911877015424255443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb1eb56ac72913f34232dc3f062d468ec3e0fa33
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1593 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f556eff0e000004030046304402204c75c3bbe75ca5641522037277242798514d1bbc08b4344ef01ae8359470c2bf022071eddb0e927753dbe1eab6130fc3fa67d3743ada39c3847bdb29b71d33054046007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f556eff090000040300473045022060a6afd3e14032b3146d9c021e50919063744eea5b28e252563dffd53d2c595e0221008703ebe978bfc86ce2b692532c17328d43bfa3eb80d3540796107074a46ed655
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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