lucknow.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:ed:b5:9d:50:d5:c2:5b:5a:20:06:74:7a:a3:7b:8f:06:d9 was issued on by Let's Encrypt.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lucknow.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ed:b5:9d:50:d5:c2:5b:5a:20:06:74:7a:a3:7b:8f:06:d9
Serial Number (int): 342225185852915532959055356932684824643289
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d2:63:7a:a0:c8:b5:74:85:61:fb:41:42:96:b6:88:db:95:e1:3c:40
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a6:39:8b:bd:e7:06:12:b1:95:13:b2:9c:4f:74:f4:d6:f5:c5:9b:8d
Fingerprint (sha256): dc:4e:2c:b9:98:7e:b1:60:12:21:36:d3:29:c7:94:91:7a:01:87:d0:3c:7a:11:ca:6d:1b:5b:2e:65:6e:a0:1b

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate lucknow.school.nz

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lucknow.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

abundantlife.school.nz
ahiparagamefishclub.co.nz
ararimu.school.nz
ashleyforestrallysprint.co.nz
aucklandrugby.co.nz
aucklandsquashjuniors.nz
aucklandtouch.co.nz
basketballtaranaki.co.nz
boptouch.co.nz
bowlshawkesbay.org.nz
bowlswaikanae.com
bsgevents.co.nz
bullernetball.co.nz
cometswimming.co.nz
csa.org.nz
eakfc.org
ecbsoftball.org.nz
feildinglawnmowerracing.org.nz
generatenetwork.org
greertonponyclub.com
hamiltoncanoepolo.org.nz
harbourhockey.org.nz
hawkesbaylandingpad.co.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
hblp.co.nz
hbsfc.co.nz
hockeysouthcanterbury.co.nz
hyc.org.nz
jcc.org.nz
juniorcricket.co.nz
jyf.co.nz
karakacricket.co.nz
karakatennis.co.nz
kensingtonfitness.co.nz
kiwikidz.co.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlborough-car-club.co.nz
marlboroughparktennis.co.nz
marlboroughvolleyball.org.nz
morningtonbowlingclub.co.nz
mtrbmx.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballwairarapa.co.nz
northcoterugby.co.nz
northharboursoftball.co.nz
northharbourtag.co.nz
nskfc.org.nz
nzpowerlifting.co.nz
nztua.com
osssa.org.nz
otahuhuroversrugbyleague.co.nz
parafednorthland.co.nz
playbowls.co.nz
ponsonbybowls.nz
porritt.school.nz
prdf.co.nz
ratec.org.nz
rbpc.nz
riverroad.co.nz
schoolground.com
schoolsportaoraki.co.nz
shoreroversnetball.co.nz
southerntack.co.nz
sportotago.co.nz
sportsground.com
stewartalexander.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
taradale.co.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
tgahockey.co.nz
torbaytennis.org.nz
touchnorthharbour.co.nz
touchpapamoa.co.nz
tutangiora.nz
twyford.school.nz
waiopehu.ac.nz
waiukuponyclub.co.nz
wellingtonrnr.org.nz
whangareitri.co.nz
wmcc.net.nz
woodendrugby.co.nz

Other certificates including the domain name lucknow.school.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
sporty.co.nz
northcanterburyrugby.co.nz
hastings-central.school.nz
ultrarunner.org.nz
www.oacnz.org
sporty.co.nz
aafl.co.nz
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
aucklandmarist.co.nz
www.wmsc.org.nz
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
sporty.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for lucknow.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL18POmYAlLnTtyNpP3t
vwBvgXZf0doY1qZGAx5wOHpiJc273fZoE+ucLB2PCucoYAfsL70cE30WdfSVKj+/
rvwM3psUsHy0sanXJPDt0iCFQMoyNGD1axAJZltpZ5XM7YALycme5/jmvTpVSzXV
Myw/aaXZ5I+0Kw+cdDlePA42/Kp1KMdhlmAnU7C2TXrW+To3JkyMxgC5Ob138Cvf
ete5wQCzPz+8Ylknc43e06gvJuzEjVmBtCZGUwmiMl9s163Q+qIhOqGRVp/H7rTQ
7NX5khGsBlqwyKqiN3nacxv7cyZjNbuNMXhdEUZQ2//5CSWb6Vc/BxIeLZqdjlqu
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 342225185852915532959055356932684824643289
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 11:16:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 11:16:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lucknow.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22816333580022675543162250011189738077570595016668516531551588471656628563515798821310105553932252206311692601164247164503629190512662074045375821261949953550988430531622233568093204803448505381588065996107785488465925976077904814694574985165069160948742709986499317183068933484974447459656902542605126670246274649156685663889131853659359568854471381182619812332707354620703451594112492166951310028402174110949828266604411252814519931774686990042181855476879440856261498694576964660412378647267169254246778741586724539717426534139222594047924286825143050691334297546068498893731093963360806020903531050815416197361369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d2637aa0c8b5748561fb414296b688db95e13c40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1897 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a579e2090000040300483046022100861e167eed1f276b605af79a6c914f21dfa6b9f2b1353b29266b5ca369571cfc022100a6af013f4c3f302718920d5c32b5483066f8926f84daa122a5762d634f792e55007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170a579e210000004030048304602210083b6620d401048d771570bdabab8830c67a974a39238a237843c8885f66a6e74022100bea4fc0d4445beebef2bb2f2e5b4b09eaeb786f4ec34568eec9b4c6422fee8a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0088505912d86714c33ba6d2b34203c62ff41920c9c9361e2ec84faf452dd302b587807312ffd5cb32b2550951382d061e226728da0109af22962addf4395a061c197e581b548237d83bb6f066a589f1b68395847cfade7e204c04f0727be943c0e5cb988042254f5a4915ca3c46c918ccceb83638d0ea2034784b219a8df1c7abfb5fc863ab0dc850ccb80284fcd5b4d6943d91581ff3b59ea6f8e89f76af64959a02cf351139944de9d89f45edd677ac86c059362a3a80eb141adc63ebeb9e35a8ee2588c21cbd7df915f294f629a476b8fe0c4b980637dfe9e165da4867cfd1ffb450356e80f51babe5887aa8b411be2559670f00f3eeaa2278a17cb658bf75