www.christchurchmetrocricket.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:2c:f5:6e:8e:82:94:d4:b8:51:70:4c:ce:6e:22:2f:8c was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.christchurchmetrocricket.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:2c:f5:6e:8e:82:94:d4:b8:51:70:4c:ce:6e:22:2f:8c
Serial Number (int): 343404668610127655421270860330131381170060
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 55:cf:e4:83:1a:0d:e7:e1:14:c5:5c:55:81:ef:57:03:c9:c4:f2:e5
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bf:fd:e2:75:3f:5a:be:5e:28:50:3c:8e:5f:3a:ac:17:12:7f:31:b1
Fingerprint (sha256): e4:69:73:ef:b5:d0:20:74:7f:f5:aa:91:64:91:41:68:98:ff:30:19:f1:41:b3:40:dc:f3:44:a3:9d:c4:7c:e0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.christchurchmetrocricket.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.christchurchmetrocricket.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.akaranacityrifleclub.co.nz
www.amdg.org.nz
www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.badminton.org.nz
www.baseballnzcharity.com
www.blokarthb.co.nz
www.bluerovers.co.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.bowlsstadium.nz
www.businesshb.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.carltonjuniorsrugby.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.cmydt.co.nz
www.collegesportsportal.co.nz
www.darfieldcricket.co.nz
www.dioarts.co.nz
www.dioarts.school.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.grantsbraesafc.com
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.helensvillerugby.co.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.howicknetball.org.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.maristalbion.co.nz
www.maristinvercargill.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.mosgielafc.co.nz
www.mountroskillrugby.co.nz
www.mrra.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.otahuhusoccer.org.nz
www.otumoetaifootball.co.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.parklandsunited.co.nz
www.parklandsunitedsportsclub.net.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.pkjsports.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sasfootball.club
www.sasfootball.org.nz
www.sharkssports.co.nz
www.southernunited.co.nz
www.speedway.co.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sumnerbowls.co.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.thesalmonrun.nz
www.ths.school.nz
www.trfu.co.nz
www.unimountafc.org.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.whangareibridgeclub.co.nz
www.worldpowerlifting.nz
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name christchurchmetrocricket.co.nz

(limited to 100 certificates)
amdg.org.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
sporty.co.nz
squashauckland.org.nz
sporty.co.nz
sporty.co.nz
www.sportsground.com
www.akaranacityrifleclub.co.nz
sporty.co.nz
www.cyclingsc.co.nz
sporty.co.nz
sporty.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
amdg.org.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
sporty.co.nz
sporty.co.nz
trfu.co.nz

Certificate

The complete raw certificate details for www.christchurchmetrocricket.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOrzCCDZegAwIBAgISA/Es9W6OgpTUuFFwTM5uIi+MMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMDkyMDUwMDVaFw0x
OTAxMDcyMDUwMDVaMC0xKzApBgNVBAMTInd3dy5jaHJpc3RjaHVyY2htZXRyb2Ny
aWNrZXQuY28ubnowggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIBiRf
J2jIG4AWKbTBKqa8AWCGIYv4H8Z59y7Vp2SsziyhjQha0CC3E5sEjJDWcoTvvIW6
6vysep1Dqb/WbtTBNC74emvOj1lamAnAutvQGgE+R3U5loHvrbRtNqOn2YHyHB3w
wwwCVf/8Ltio+afZzEdhQx6sWanTOR+RNHb1yG9ZfW2owPBqwQdlrRma/Ryv+ufO
pwDerpVivYpA6684LukT3Ir7rieBF8MvzrTKbBAEKPO5Qldp2DvREYB4aLfqiHP8
Ev4zwPf2UZlxWE9xOc56lNxyC1+IBiFVPLKyzREqa4cgF/KdA7qLyXxAFSV/qpWJ
zThUSsb5tn0biH+lAgMBAAGjgguqMIILpjAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FFXP5IMaDefhFMVcVYHvVwPJxPLlMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZF
Ze/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3Au
aW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQu
aW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wggisBgNVHREEggijMIIIn4IXbXVzaWMu
cm9zbWluaS5zY2hvb2wubnqCF3Nwb3J0LnJvc21pbmkuc2Nob29sLm56gh53d3cu
YWthcmFuYWNpdHlyaWZsZWNsdWIuY28ubnqCD3d3dy5hbWRnLm9yZy5ueoIYd3d3
LmFvcmFraS1kcmFnb25zLmNvLm56gg93d3cuYXJyYS5vcmcubnqCGXd3dy5hd2F0
ZXJlZ29sZmNsdWIuY28ubnqCFHd3dy5iYWRtaW50b24ub3JnLm56ghl3d3cuYmFz
ZWJhbGxuemNoYXJpdHkuY29tghN3d3cuYmxva2FydGhiLmNvLm56ghR3d3cuYmx1
ZXJvdmVycy5jby5ueoIWd3d3LmJvcGJhZG1pbnRvbi5jby5ueoIUd3d3LmJvd2xz
b21hbnUuY28ubnqCE3d3dy5ib3dsc3N0YWRpdW0ubnqCFHd3dy5idXNpbmVzc2hi
LmNvLm56ghF3d3cuYnVzaW5lc3NoYi5ueoIYd3d3LmNhbm9lc2xhbG9tbnoub3Jn
Lm56ghp3d3cuY2FudGVyYnVyeXVuaXRlZC5jby5ueoIZd3d3LmNhcGl0YWxiYXNl
YmFsbC5jby5ueoIdd3d3LmNhcmx0b25qdW5pb3JzcnVnYnkuY28ubnqCInd3dy5j
aHJpc3RjaHVyY2htZXRyb2NyaWNrZXQuY28ubnqCIHd3dy5jaHJpc3RjaHVyY2ht
ZXRyb2NyaWNrZXQuY29tgiB3d3cuY2hyaXN0Y2h1cmNobWV0cm9jcmlja2V0Lm9y
Z4Ijd3d3LmNocmlzdGNodXJjaG1ldHJvY3JpY2tldC5vcmcubnqCFXd3dy5jbGlm
dG9uY3JpY2tldC5ueoIcd3d3LmNsaWZ0b25jcmlja2V0Y2x1Yi5jby5ueoIWd3d3
LmNsdWJzbnpkYXJ0cy5jby5ueoIPd3d3LmNteWR0LmNvLm56gh13d3cuY29sbGVn
ZXNwb3J0c3BvcnRhbC5jby5ueoIZd3d3LmRhcmZpZWxkY3JpY2tldC5jby5ueoIR
d3d3LmRpb2FydHMuY28ubnqCFXd3dy5kaW9hcnRzLnNjaG9vbC5ueoIUd3d3LmZv
eHRvbmdvbGYuY28ubnqCEnd3dy5na3Nwb3J0cy5jby5ueoIWd3d3LmdyYW50c2Jy
YWVzYWZjLmNvbYINd3d3LmhicmVkcy5ueoImd3d3LmhlYWx0aHlmYW1pbGllc2lu
dmVyY2FyZ2lsbC5vcmcubnqCGnd3dy5oZWxlbnN2aWxsZXJ1Z2J5LmNvLm56ghZ3
d3cuaGlnaGxpZ2h0Y2FtLmNvLm56ghF3d3cuaG53YWZjLm9yZy5ueoIZd3d3Lmhv
Y2tleW1hbmF3YXR1Lm9yZy5ueoIYd3d3Lmhvd2lja25ldGJhbGwub3JnLm56ghh3
d3cua2FwaXRpc29mdGJhbGwuY28ubnqCFXd3dy5rYXVtYXR1YXRjLm9yZy5ueoIW
d3d3Lm1hcmlzdGFsYmlvbi5jby5ueoIcd3d3Lm1hcmlzdGludmVyY2FyZ2lsbC5j
by5ueoIUd3d3Lm1jb2JzcXVhc2guY28ubnqCEHd3dy5tb29sb28uY28ubnqCHnd3
dy5tb29sb29jb21tdW5pdHlydWdieS5jby5ueoIYd3d3Lm1vb25zaGluZXRyYWls
LmNvLm56ghR3d3cubW9zZ2llbGFmYy5jby5ueoIbd3d3Lm1vdW50cm9za2lsbHJ1
Z2J5LmNvLm56gg53d3cubXJyYS5jby5ueoIPd3d3Lm5ocnJhLmNvLm56ghB3d3cu
bm9ydGhzLmNvLm56ghV3d3cubm9ydGhzcnVnYnkuY28ubnqCGHd3dy5vdGFodWh1
c29jY2VyLm9yZy5ueoIbd3d3Lm90dW1vZXRhaWZvb3RiYWxsLmNvLm56ghl3d3cu
cGFwYWt1cmFjaXR5ZmMub3JnLm56ghZ3d3cucGFwYWt1cmFuZXRiYWxsLm56ghp3
d3cucGFwYWt1cmFuZXRiYWxsLm9yZy5ueoIZd3d3LnBhcmtsYW5kc3VuaXRlZC5j
by5ueoIkd3d3LnBhcmtsYW5kc3VuaXRlZHNwb3J0c2NsdWIubmV0Lm56ghx3d3cu
cGF1YW51aWxpZmVndWFyZHMub3JnLm56ghh3d3cucGhvZW5peHN5bmNocm8uY28u
bnqCE3d3dy5wa2pzcG9ydHMuY28ubnqCGnd3dy5wdWtla29oZXNvZnRiYWxsLmNv
Lm56ghd3d3cucm95YWxvYWtib3dscy5jby5ueoIUd3d3LnNhc2Zvb3RiYWxsLmNs
dWKCFnd3dy5zYXNmb290YmFsbC5vcmcubnqCFnd3dy5zaGFya3NzcG9ydHMuY28u
bnqCGHd3dy5zb3V0aGVybnVuaXRlZC5jby5ueoISd3d3LnNwZWVkd2F5LmNvLm56
ghh3d3cuc3BvcnRub3J0aGxhbmQuY28ubnqCFXd3dy5zcG9ydG5vcnRobGFuZC5u
eoIVd3d3LnN1bW5lcmJvd2xzLmNvLm56ghd3d3cuc3lkZW5oYW1ydWdieS5jby5u
eoIbd3d3LnRhcmFkYWxlZm9vdGJhbGwub3JnLm56ghN3d3cudGhlc2FsbW9ucnVu
Lm56ghF3d3cudGhzLnNjaG9vbC5ueoIOd3d3LnRyZnUuY28ubnqCFnd3dy51bmlt
b3VudGFmYy5vcmcubnqCE3d3dy53YWhpbmV0b2FtY2MubnqCIHd3dy53ZXN0bGFu
ZG1vdG9yY3ljbGVjbHViLmNvLm56gh13d3cud2hhbmdhcmVpYnJpZGdlY2x1Yi5j
by5ueoIYd3d3LndvcmxkcG93ZXJsaWZ0aW5nLm56ghx3d3cud29ybGRzZXJpZXNj
cmlja2V0LmNvLm56ggt3d3cud3NyYS5ueoIMd3d3Lndzc2ZhLm56MIH+BgNVHSAE
gfYwgfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYa
aHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhp
cyBDZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5n
IFBhcnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZp
Y2F0ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVw
b3NpdG9yeS8wggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgApPFGWVMg5ZbqqUPxY
B9S3b79Yeily3KTDDPTlRUf0eAAAAWZazvdaAAAEAwBHMEUCIDmFQO+XOJTP6bG/
s7JLJkPpRkiZauwm2D5TTbdZTNZvAiEAmJlMi6jtYTOLqfrJf4U3LeQj2HWd3Q+R
xYPhqpb7LWUAdQBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWZa
zvkaAAAEAwBGMEQCICgCKv3WMYK/lrsYg4ZyNXOo/9PIgktTe9N5YQWu5rYIAiBa
rlt6at6pSlbReI6mshN8EAfaygc0al0oOt4EF778+DANBgkqhkiG9w0BAQsFAAOC
AQEAZwveqv/1H4YA3xoTSRcK5s4vTem4WhZzIHta/hTzvKAkDFiA3QaImz2D+Bsm
19LHcHv028372x8SR/YDXl7n3gKBGWNeAotL61QNTL1nYxBmKaBrVGjrIRFpoWxL
OmTWc1KGSJTGYOX+waMZWwjiP1haBr4jVM7MNPO9SpFeSY4hTNEX/isfD0VZxAPH
BAKFkF5syGg/IpF5GUMsUGyyyS4oNWaUM5RmZQhqoY8F65ZT9fjnlkW/cWMA6uvY
839gw1rM6xNpcGTuU9PvArliWe6oFw0KgLL7Tc9el7zQOYGqrdgsfbrw4jZKDdzU
8Fp4CVUakrNTF9IsNc9pTusqbg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAYkXydoyBuAFim0wSqm
vAFghiGL+B/Gefcu1adkrM4soY0IWtAgtxObBIyQ1nKE77yFuur8rHqdQ6m/1m7U
wTQu+Hprzo9ZWpgJwLrb0BoBPkd1OZaB7620bTajp9mB8hwd8MMMAlX//C7YqPmn
2cxHYUMerFmp0zkfkTR29chvWX1tqMDwasEHZa0Zmv0cr/rnzqcA3q6VYr2KQOuv
OC7pE9yK+64ngRfDL860ymwQBCjzuUJXadg70RGAeGi36ohz/BL+M8D39lGZcVhP
cTnOepTccgtfiAYhVTyyss0RKmuHIBfynQO6i8l8QBUlf6qVic04VErG+bZ9G4h/
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343404668610127655421270860330131381170060
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 20:50:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-07 20:50:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17171438246403939497784788326691609407959263622173591261661581658966989926331501450357560847902467833300476970235863220886374776287992294162474159619460617140873439493380972352841421446827697417053716427496198984052921939254191874007613191073137131842117041364810583613322818557702063469383909694467392472571859635526994413205690168977485638131311160793372491144366773652286608242676163666491659623473919542475549148549418800764088727043229231638022617688363632260130653813980342331678522840559239644976265283091476699785442908429810260463519857499729172103166921188258444522694709543394356654299485988275365823938469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55cfe4831a0de7e114c55c5581ef5703c9c4f2e5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2211 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnzcharity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dioarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dioarts.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grantsbraesafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountroskillrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pkjsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665acef75a00000403004730450220398540ef973894cfe9b1bfb3b24b2643e94648996aec26d83e534db7594cd66f02210098994c8ba8ed61338ba9fac97f85372de423d8759ddd0f91c583e1aa96fb2d650075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001665acef91a0000040300463044022028022afdd63182bf96bb188386723573a8ffd3c8824b537bd3796105aee6b60802205aae5b7a6adea94a56d1788ea6b2137c1007daca07346a5d283ade0417befcf8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00670bdeaafff51f8600df1a1349170ae6ce2f4de9b85a1673207b5afe14f3bca0240c5880dd06889b3d83f81b26d7d2c7707bf4dbcdfbdb1f1247f6035e5ee7de028119635e028b4beb540d4cbd6763106629a06b5468eb211169a16c4b3a64d67352864894c660e5fec1a3195b08e23f585a06be2354cecc34f3bd4a915e498e214cd117fe2b1f0f4559c403c7040285905e6cc8683f22917919432c506cb2c92e2835669433946665086aa18f05eb9653f5f8e79645bf716300eaebd8f37f60c35acceb13697064ee53d3ef02b96259eea8170d0a80b2fb4dcf5e97bcd03981aaadd82c7dbaf0e2364a0ddcd4f05a7809551a92b35317d22c35cf694eeb2a6e