pioneerbasketballclub.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:01:0a:3b:c7:72:1e:cd:6a:f2:54:95:2e:cd:f8:49:d4:2f was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=pioneerbasketballclub.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:01:0a:3b:c7:72:1e:cd:6a:f2:54:95:2e:cd:f8:49:d4:2f
Serial Number (int): 261690742832915235655331458766278545232943
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 91:9b:41:e6:e4:f9:ae:af:08:fe:c3:77:43:c2:94:55:11:8d:1d:92
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 02:dd:cb:8d:ed:1a:70:28:29:52:2f:fa:7c:d4:91:b8:b5:a4:0c:6d
Fingerprint (sha256): e5:2b:6b:a8:36:24:eb:11:ba:4a:ee:23:83:3c:34:2a:66:45:fb:40:b6:03:91:56:1f:d0:dc:6d:91:dc:a1:a5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate pioneerbasketballclub.co.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pioneerbasketballclub.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aafl.co.nz
abundantlife.school.nz
actc.org.nz
ahiparagamefishclub.co.nz
aucklandmarist.co.nz
basketballtaranaki.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
boptouch.co.nz
bsgevents.co.nz
bullernetball.co.nz
canoeslalombop.co.nz
capitaldarts.co.nz
cornwallparktouch.nz
csa.org.nz
czctc.org.nz
farmpass.co.nz
feildinglawnmowerracing.org.nz
gisborneboardriders.com
greertonponyclub.com
hamiltoncanoepolo.org.nz
hastings-central.school.nz
hbcfc.co.nz
hbcfc.org.nz
hbcommunityfitness.co.nz
hbcommunityfitness.org.nz
heet.net.nz
hockeysouthcanterbury.co.nz
hortpass.co.nz
hyc.org.nz
jcc.org.nz
lucknow.school.nz
mandevillesports.co.nz
manurewaswimmingclub.co.nz
marketground.co.nz
marlboroughparktennis.co.nz
melrosetargetshooting.co.nz
morningtonbowlingclub.co.nz
mtwellingtonrugby.co.nz
nelsoncarclub.co.nz
nelsonfarmersmarket.co.nz
nelsonfarmersmarket.org.nz
nelsonsoftball.org.nz
netballmanawatu.org.nz
northcanterburyrugby.co.nz
northcoterugby.co.nz
northharbourtag.co.nz
nzblackpowder.co.nz
nzblackpowder.com
nzpca.org
nzpowerlifting.co.nz
nztua.com
otagotouch.co.nz
otahuhuroversrugbyleague.co.nz
pioneerbasketballclub.co.nz
ponekerugby.com
ponsonbybowls.nz
prebbletonnetball.org.nz
puhoisports.org.nz
rbpc.nz
riverroad.co.nz
schoolground.com
scrfu.co.nz
shoreroversnetball.co.nz
southernlakesmultisportclub.co.nz
southerntack.co.nz
southlandolympicweightlifting.co.nz
sportsground.com
stewartalexander.co.nz
stheliersbowlingclub.co.nz
stjosephschb.school.nz
sunrisecottage.co.nz
tabletennis.org.nz
tasportscycling.co.nz
temata.school.nz
terracechb.school.nz
timarucyclingclub.co.nz
touchnorthharbour.co.nz
tuakauponyclub.co.nz
tutangiora.nz
ultrarunner.org.nz
volleyballbop.co.nz
waikatohockey.org.nz
wellingtonrnr.org.nz
wellsfordsquashclub.co.nz
whangareitri.co.nz
woodendrugby.co.nz
wops.co.nz

Other certificates including the domain name pioneerbasketballclub.co.nz

(limited to 100 certificates)
www.nelsoncarclub.co.nz
willowpark.school.nz
sporty.co.nz
sporty.co.nz
meeanee.school.nz
sporty.co.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
southlandmtbclub.co.nz
www.oacnz.org
sporty.co.nz
sporty.co.nz
www.rollestonrugby.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.wmsc.org.nz
uniss.co.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
canterburybaseball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz
basketballtaranaki.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for pioneerbasketballclub.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmeF5/zHNzq9+wI5sTbe
yKS8M1VTipEii44bz2ChVIWAZfV3Wa9kQnqihKPTsOcSq3V1nMnTYLzK9chmKufT
3uhbI/JtmWMwPOTGGRihDogW2LHwPMhWYIA5l6FemzKIYrq6QcSmHZxEUiRg7YRR
0d8mneyOtkKb00tMLojciuBm6fiMVZa0V05ycNJHPBKrwlzC5ehsGSNH16E6fr3T
HEBHWJYVWh/Sy24mixOKiz6ydEBcEVKAzrFe8hUO6vrzfB7aCcM6BjLe/MGmWN+P
LG0s5xPHRlf/pyZPAHpNi4U9B6GdsbYh1n0yGR7janP78r7LCT409dwiwOyND7qe
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 261690742832915235655331458766278545232943
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-29 02:54:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-27 02:54:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pioneerbasketballclub.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24541280292400409908167926643231246563753528295616494333358326894637302159699325888281753152699003281583718309467828445951733153061415380125029678688220976557391435799339351411137602906172274520549370699817340951665546577309024571135288705641378820798822918010387015035344943367412471905311581044335075165600864930620070654032000518745338376450244055548520715557197193809661561394742747740355040429258889710075049915611872080331797764609170992478939781818663779214162587989626676270863511536196308453106402873232291542932161234878626467103796252193013335290885126344598411886126567625593242418150742103444085462965879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							919b41e6e4f9aeaf08fec37743c29455118d1d92
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1897 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'czctc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mandevillesports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001675d9a44ea0000040300473045022075d2f52696a8e4038dc19904d89eacd6e24a603e2043a700d5c2ed2dae612302022100dc49d975100da71c2805571240fa82a9893c49e6e887aa45bb8e94d95bd2f901007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675d9a46e0000004030046304402200bcc9b8b7a9882f5d8f4e497d07e8a63e84b1f488d3f4a48208511e0f2523eb10220795413c5aa7fc79785d7deab9c35c19fd9bf10ef790bd4ae8599ff35f2235c46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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