www.badmintonhb.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:e2:f2:93:c0:5a:6a:c7:9c:43:2f:73:da:ef:2c:bc:dd was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.badmintonhb.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:e2:f2:93:c0:5a:6a:c7:9c:43:2f:73:da:ef:2c:bc:dd
Serial Number (int): 274569252797917559646230867092891021130973
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 56:a7:08:26:d6:35:b7:c1:cc:81:d4:58:2d:68:4f:c2:2c:fb:42:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ef:fc:06:cc:a1:46:d4:c1:d2:10:40:e9:f9:54:8d:63:af:ea:43:33
Fingerprint (sha256): e0:f8:47:1a:03:eb:20:eb:5e:e9:42:c1:3c:e2:44:e9:bf:fa:7c:19:4f:82:0e:7a:1e:94:f2:22:31:6b:e6:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.badmintonhb.co.nz

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.badmintonhb.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sporty-production2.trafficmanager.net
www.aafl.co.nz
www.actc.org.nz
www.acwpa.co.nz
www.aucklandmarist.co.nz
www.badmintonhb.co.nz
www.basketballtaranaki.co.nz
www.belmontparkbowlingclub.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.bushmultisport.org.nz
www.canamju.org
www.canoeslalombop.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.halswellcricket.co.nz
www.hastings-central.school.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.marchingcanterbury.co.nz
www.maristfc.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.oacnz.org
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.rangitikeigolfclub.co.nz
www.schoolground.com
www.seatounafc.org.nz
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.sportsground.com
www.stheliersbowlingclub.co.nz
www.stjosephschb.school.nz
www.suburbsrugby.co.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.taierirugby.co.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.timarusquashclub.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz

Other certificates including the domain name badmintonhb.co.nz

(limited to 100 certificates)
willowpark.school.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
sporty.co.nz
www.canterburybaseball.co.nz
southlandmtbclub.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
www.rollestonrugby.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
uniss.co.nz
sporty.co.nz
rosmini.school.nz
sporty.co.nz
www.badmintonhb.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
mtwswim.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.badmintonhb.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOBDCCDOygAwIBAgISAybi8pPAWmrHnEMvc9rvLLzdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MjcyMjUyMjBaFw0x
OTA4MjUyMjUyMjBaMCAxHjAcBgNVBAMTFXd3dy5iYWRtaW50b25oYi5jby5uejCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKIFsq9kGHeH/xCQlijFTq/Z
zgDI/SGWu975ppSXGfmlexwg8URcPK/lLOMbsf3eS8pHsFfbacNQ4oZAiJctFF2w
lWHDRSAsMaMGou6AUANE9rEpIWAS+kyNKeuMiqT5Dg70ZKvBdu8mZFzBrnIRZ+IM
9TqALQyUPLTV3jjLUqhS/oM6qj5kU0EO2ygdFiQXvytsjSWLFPjfUejLhb6UVozq
UidLNdQizeaCtYhIk+ZXfq9Wa65Xrary8WFCOUe12A32xLRNI0fpD7mzw2iQTLQk
FSioxLu9Hidj/cVKQUsXUZwtlO1nabKAr2xBStKh0Zul/GKHDo+k1pq00HTBys0C
AwEAAaOCCwwwggsIMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVqcIJtY1t8HMgdRY
LWhPwiz7QiUwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYB
BQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2Vu
Y3J5cHQub3JnLzCCCMAGA1UdEQSCCLcwggizgiVzcG9ydHktcHJvZHVjdGlvbjIu
dHJhZmZpY21hbmFnZXIubmV0gg53d3cuYWFmbC5jby5ueoIPd3d3LmFjdGMub3Jn
Lm56gg93d3cuYWN3cGEuY28ubnqCGHd3dy5hdWNrbGFuZG1hcmlzdC5jby5ueoIV
d3d3LmJhZG1pbnRvbmhiLmNvLm56ghx3d3cuYmFza2V0YmFsbHRhcmFuYWtpLmNv
Lm56giB3d3cuYmVsbW9udHBhcmtib3dsaW5nY2x1Yi5jby5ueoIad3d3LmJsZW5o
ZWltZ29sZmNsdWIuY28ubnqCGHd3dy5ibHVmZmhpbGxib3dscy5jby5ueoIYd3d3
LmJvd2xzd2FuZ2FudWkub3JnLm56ghN3d3cuYnNnZXZlbnRzLmNvLm56ghd3d3cu
YnVsbGVybmV0YmFsbC5jby5ueoIZd3d3LmJ1c2htdWx0aXNwb3J0Lm9yZy5ueoIP
d3d3LmNhbmFtanUub3Jnghh3d3cuY2Fub2VzbGFsb21ib3AuY28ubnqCHXd3dy5j
bGV2ZWRvbmNyaWNrZXRjbHViLmNvLm56ght3d3cuY2xldmVkb25yaWZsZWNsdWIu
Y28ubnqCDnd3dy5jbWloLmNvLm56ghp3d3cuZ2lzYm9ybmVoYXJyaWVycy5jby5u
eoIgd3d3LmdsZW5idXJuaWNlc2thdGluZ2NsdWIuY28ubnqCGXd3dy5oYWxzd2Vs
bGNyaWNrZXQuY28ubnqCHnd3dy5oYXN0aW5ncy1jZW50cmFsLnNjaG9vbC5ueoIc
d3d3LmhiY29tbXVuaXR5Zml0bmVzcy5jby5ueoIdd3d3LmhiY29tbXVuaXR5Zml0
bmVzcy5vcmcubnqCD3d3dy5oZWV0Lm5ldC5ueoIVd3d3LmhpbGxzZWVrZXJzLmNv
Lm56ghh3d3cuaGlsbHNlZWtlcnM0d2QuY28ubnqCFXd3dy5sdWNrbm93LnNjaG9v
bC5ueoIcd3d3Lm1hcmNoaW5nY2FudGVyYnVyeS5jby5ueoISd3d3Lm1hcmlzdGZj
LmNvLm56ght3d3cubWFybGJvcm91Z2h0ZW5uaXMuY28ubnqCHXd3dy5tYXJ0aW5i
b3JvdWdoc3F1YXNoLmNvLm56giF3d3cubWFydGluYm9yb3VnaHRlbm5pc2NsdWIu
Y28ubnqCEnd3dy5tY2hvY2tleS5jby5ueoIfd3d3Lm1lbHJvc2V0YXJnZXRzaG9v
dGluZy5jby5ueoISd3d3Lm1lc29iYWxsLmNvLm56ght3d3cubXR3ZWxsaW5ndG9u
cnVnYnkuY28ubnqCEXd3dy5tdHdzd2ltLmNvLm56gg93d3cubmNuYy5vcmcubnqC
F3d3dy5uZWxzb25jYXJjbHViLmNvLm56ghp3d3cubmV0YmFsbG1hbmF3YXR1Lm9y
Zy5ueoIgd3d3Lm5ldGJhbGxzb3V0aGNhbnRlcmJ1cnkuY28ubnqCGHd3dy5ub3J0
aGNvdGVydWdieS5jby5ueoIZd3d3Lm5vcnRoaGFyYm91cnRhZy5jby5ueoINd3d3
Lm56dHVhLmNvbYINd3d3Lm9hY256Lm9yZ4IUd3d3Lm90YWdvdG91Y2guY28ubnqC
FXd3dy5wYXBhcm9hLnNjaG9vbC5ueoIWd3d3LnBhcmt2YWxlLnNjaG9vbC5ueoIQ
d3d3LnBjamNjLm9yZy5ueoIfd3d3LnBpb25lZXJiYXNrZXRiYWxsY2x1Yi5jby5u
eoIcd3d3LnByZWJibGV0b25uZXRiYWxsLm9yZy5ueoIhd3d3LnByaW1hcnlzcG9y
dHdlbGxpbmd0b24ub3JnLm56ghZ3d3cucHVob2lzcG9ydHMub3JnLm56ghx3d3cu
cmFuZ2l0aWtlaWdvbGZjbHViLmNvLm56ghR3d3cuc2Nob29sZ3JvdW5kLmNvbYIV
d3d3LnNlYXRvdW5hZmMub3JnLm56ghx3d3cuc2hvcmVyb3ZlcnNuZXRiYWxsLmNv
Lm56ghZ3d3cuc291dGhlcm50YWNrLmNvLm56gid3d3cuc291dGhsYW5kb2x5bXBp
Y3dlaWdodGxpZnRpbmcuY28ubnqCFHd3dy5zcG9ydHNncm91bmQuY29tgh53d3cu
c3RoZWxpZXJzYm93bGluZ2NsdWIuY28ubnqCGnd3dy5zdGpvc2VwaHNjaGIuc2No
b29sLm56ghZ3d3cuc3VidXJic3J1Z2J5LmNvLm56ghh3d3cuc3VucmlzZWNvdHRh
Z2UuY28ubnqCFnd3dy50YWJsZXRlbm5pcy5vcmcubnqCFXd3dy50YWllcmlydWdi
eS5jby5ueoIdd3d3LnRhc21hbnJ1Z2J5cmVmZXJlZXMuY28ubnqCGXd3dy50ZWF3
YW11dHVzcXVhc2guY28ubnqCG3d3dy50ZWNobmljYWxoYXJyaWVycy5jby5ueoIU
d3d3LnRlbWF0YS5zY2hvb2wubnqCGHd3dy50ZXJyYWNlY2hiLnNjaG9vbC5ueoIa
d3d3LnRpbWFydXNxdWFzaGNsdWIuY28ubnqCG3d3dy50cmVudGhhbXJpZmxlY2x1
Yi5jby5ueoIYd3d3LnR1YWthdXBvbnljbHViLmNvLm56ghF3d3cudHV0YW5naW9y
YS5ueoIWd3d3LnVsdHJhcnVubmVyLm9yZy5ueoIXd3d3LnZhbGxleWhvY2tleS5v
cmcubnqCF3d3dy52b2xsZXliYWxsYm9wLmNvLm56ghh3d3cud2Fpa2F0b2hvY2tl
eS5vcmcubnqCGHd3dy53ZWxsaW5ndG9ucm5yLm9yZy5ueoIad3d3LndlbGxpbmd0
b250b3VjaC5vcmcubnqCHXd3dy53ZWxsc2ZvcmRzcXVhc2hjbHViLmNvLm56gg53
d3cud2h0Yy5jby5ueoIPd3d3Lndtc2Mub3JnLm56gg53d3cud29wcy5jby5uejBM
BgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIB
FhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUE
gfIA8AB2AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABavu1jJIA
AAQDAEcwRQIhAP41nX74k5vbXJt3iCbRb4EbIgbFmNjkmm6Ypg8cOCfCAiBzwMO7
RJrWUE9zZdRB061leo7BWxqgMBLWsOHGzGfvOQB2AOJpS64m6OlACeiGG7Y7g9Q+
5/50iPukjyiTAZ3d8dv+AAABavu1jlsAAAQDAEcwRQIgeZ7bp8zgBNWRs2YNNqJN
burvJkPACigpgZJ8IbY9O0YCIQDio4uU1kvpbEn/n15E5XH2hFQPGQBFClQ9E4OY
YFvKdDANBgkqhkiG9w0BAQsFAAOCAQEAN5pMsGAueUsU2Z53oI6Lwfiz0Qc46aVz
KpFA+wKorRfQff+DYKtr9HfLaYyKhjdXfRSvP6qEHHSfUXj4SbukxYzNC7nsjB6T
dqV9u5afNe4gd+wtjiMLmI6GxNfS0epVDa8ohgw6E+wARmIUACB/5p9wDVZxTiCn
87kVssNf1x67MO/tezFqOJiUuXL26X3/QJBEajugTxuG2WUYnkdbMvmqK8xDwohv
zMkXz075OL/y6GQzYR7AnwPMrXNqzbBlsal73/vSjDab3VAt69TXawiPJXL5Ef9V
aF2FWTAzmeef8UwqvrJyxdzdo5ilDSlowzgtznmamthRlat8pONBwA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogWyr2QYd4f/EJCWKMVO
r9nOAMj9IZa73vmmlJcZ+aV7HCDxRFw8r+Us4xux/d5LykewV9tpw1DihkCIly0U
XbCVYcNFICwxowai7oBQA0T2sSkhYBL6TI0p64yKpPkODvRkq8F27yZkXMGuchFn
4gz1OoAtDJQ8tNXeOMtSqFL+gzqqPmRTQQ7bKB0WJBe/K2yNJYsU+N9R6MuFvpRW
jOpSJ0s11CLN5oK1iEiT5ld+r1ZrrletqvLxYUI5R7XYDfbEtE0jR+kPubPDaJBM
tCQVKKjEu70eJ2P9xUpBSxdRnC2U7WdpsoCvbEFK0qHRm6X8YocOj6TWmrTQdMHK
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274569252797917559646230867092891021130973
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 22:52:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 22:52:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.badmintonhb.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20453415187478261703032100892942594826162190987851347401784476025476773089764066030149757582748021969223308421645840924294421811159831697592002227112076994318299399481808368382604677132428155619929027303571877387557051636436455154857359783341680897647821962656300697990303241504699039960444750139489823376015061420843253850907184774007087388060795562904047196831854694174040842968144783122656138742645799639962167406863438149487640477396253432844725111073180640998763990715732547571002819219733713481241136966563443238122876825257676109782795078990555173704750959703162776074372159793587514101434101332355319299427021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56a70826d635b7c1cc81d4582d684fc22cfb4225
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2231 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production2.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016afbb58c920000040300473045022100fe359d7ef8939bdb5c9b778826d16f811b2206c598d8e49a6e98a60f1c3827c2022073c0c3bb449ad6504f7365d441d3ad657a8ec15b1aa03012d6b0e1c6cc67ef39007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016afbb58e5b00000403004730450220799edba7cce004d591b3660d36a24d6eeaef2643c00a282981927c21b63d3b46022100e2a38b94d64be96c49ff9f5e44e571f684540f1900450a543d138398605bca74
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00379a4cb0602e794b14d99e77a08e8bc1f8b3d10738e9a5732a9140fb02a8ad17d07dff8360ab6bf477cb698c8a8637577d14af3faa841c749f5178f849bba4c58ccd0bb9ec8c1e9376a57dbb969f35ee2077ec2d8e230b988e86c4d7d2d1ea550daf28860c3a13ec0046621400207fe69f700d56714e20a7f3b915b2c35fd71ebb30efed7b316a389894b972f6e97dff4090446a3ba04f1b86d965189e475b32f9aa2bcc43c2886fccc917cf4ef938bff2e86433611ec09f03ccad736acdb065b1a97bdffbd28c369bdd502debd4d76b088f2572f911ff55685d8559303399e79ff14c2abeb272c5dcdda398a50d2968c3382dce799a9ad85195ab7ca4e341c0