www.diamondsportnz.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c4:7a:7a:51:85:b2:46:1e:8c:e0:4e:c5:d4:42:93:71:93 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.diamondsportnz.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c4:7a:7a:51:85:b2:46:1e:8c:e0:4e:c5:d4:42:93:71:93
Serial Number (int): 328195002640954876375165802162111676379539
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a1:95:9f:4c:07:62:da:c5:91:6c:d6:a3:53:c9:aa:48:e2:d8:fa:27
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:19:71:90:2b:da:70:d4:fb:78:09:1f:4c:c2:b6:76:a4:26:5a:08
Fingerprint (sha256): da:dd:bd:3b:34:65:1b:b0:5e:8a:b9:a0:71:50:54:c0:00:4b:95:ae:75:4b:89:b1:60:a4:99:c3:c9:d0:02:3a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.diamondsportnz.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.diamondsportnz.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.athleticswanganui.co.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlsdunedin.co.nz
www.bowlstaurangasouth.co.nz
www.businesshawkesbay.co.nz
www.c33sports.kiwi
www.canterburybaseball.co.nz
www.collegerifles.co.nz
www.countiesbadminton.co.nz
www.cyclingtimaru.com
www.dairyflattennis.co.nz
www.developyourlegacy.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.distanceridingnewzealand.co.nz
www.forcepass.co.nz
www.gameoftwohalfwits.com
www.ghryc.co.nz
www.glenfieldbowls.co.nz
www.hcwaterpolo.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.kereru.school.nz
www.kiwiball.co.nz
www.ladiessocialcycling.org.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.maoribasketball.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.marlborough-touch.co.nz
www.meeanee.school.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.netballmanurewa.org.nz
www.newzealandbaseball.co.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.nzteachersgames.co.nz
www.opotikicol.school.nz
www.orokohangamusictrust.co.nz
www.osa.org.nz
www.papakurarugby.co.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rosmini.school.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.runwalkseries.co.nz
www.safepass.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southbridgerugby.com
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandfestivalofrunning.co.nz
www.southlandtriclub.co.nz
www.tearohagolfclub.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.uniss.co.nz
www.waihibeachtennisclub.co.nz
www.wairarapacarclub.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.willowpark.school.nz

Other certificates including the domain name diamondsportnz.co.nz

(limited to 100 certificates)
www.sportsground.com
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
www.bowlswestcoast.org.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
sporty.co.nz
manurewamets.co.nz
sporty.co.nz
www.schoolground.nz
www.waihibeachtennisclub.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
keirunga.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.diamondsportnz.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjjlDJ5YK4z0DrG03clX8
pyMDE0QTI+e9sfg6UVLEUjjsyqs0dZnkFLoSmFA8wuAtLOcIP1VqI/N1E699Qcnj
1SmKAB3rcdAkVk58G2k66CHfSn9r1RYvSpVt/8BWajS6bOQKNWMBj4BxjGJCCBux
JhDQIVWAT2wlrfcTFeqYkfq9N125MQxEB7Y8wif7DDCHyucJO1LoAQal3xSABwJ2
h0NZrcHL1kw0fHOa4QXPr87ICT/qo9kbDurQcUGRK3HISjsruDbM+PvRLxt8Kddf
FfJQ4GjGlD41RHO73I8cDAugotgGrPCVhv1MN50qIBSKRnQ3liA7pabJkLUUBqk6
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328195002640954876375165802162111676379539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 23:53:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 23:53:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.diamondsportnz.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17954076408957373594523544772283583118879287768395775234636260191940095422783346149983014493651681704847873886719356888783149472822060093682111561968605205149908665276307798734095871465883807436791269873073731071455516001376319483785226191673372556753417693079068268289079594839258193799897697601389666162539560362661296978719493116994891618321730020797414691384826577757042674789911297865549622588526471018461959155674513049687029676155771301880887368530688696534526929574383863103391195124785638725252722865693614166936383257366364747005726950021406244669052764584617058302971975375926167649284514215289088119487071
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a1959f4c0762dac5916cd6a353c9aa48e2d8fa27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2286 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c33sports.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingtimaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forcepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwiball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665b769da1000004030047304502200a39576c52058f80508c44b23ecb74c5878083e260372cb79630b7379f536a03022100f7cd980e772c6179e0608fd7c21a75e4ff05c98f0e62e9d54f9af2cd96cc7c7e0077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001665b769ef00000040300483046022100f3c8bcef26104b494c28ad16593c68419ae718f094993e0de1da37ecf4c489c5022100eac43acca84d4d982b67fade4a2af33571dc4acf0a34086efdb7b556bb5db628
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b29d3d05446c2250572e9cc91059a88e3750f35e26fb7f43ec00d337f047e7ba621c77a5fa8dcfceccf959bf56d06f48ab781e6a74a9ca81fc663d1904ad96362acb73242e500b3ac15d92ab97f57ab76d3398e2ab4b607c27084c1cd31865b87eb070e618522c31a59a748199fd2d9c4e7bcc7b05a5d3489149db76979a6e4e4c48f26f1a5aa507433762b6ff0b95984c933b38c3ae4a6212cf2e9f88f34e7dc2d71ce04bc77a8dd963c719fb59337e649fb77ff20ee6685abc0a814dd071ef4a08ba07f911c45233dc1069a304f96373454004621453ca4c50893d274015e4612de8f45d00839113c0d34889e33209b4eb7929369e6ba3672be3b8dbeb889