sporty.co.nz

Issued by R3

About this certificate

This digital certificate with serial number 04:8d:04:d2:98:b0:18:1d:36:2a:dc:e8:15:3d:36:88:52:0b was issued on by Let's Encrypt.

With 51 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:8d:04:d2:98:b0:18:1d:36:2a:dc:e8:15:3d:36:88:52:0b
Serial Number (int): 396435367854094621224572404575113851720203
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ed:a9:68:f9:ca:13:06:e9:7d:e0:11:63:aa:d0:b2:78:dc:0c:6f:de
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ec:7d:d5:ea:e8:00:7a:f1:33:38:21:19:a2:79:cc:48:a1:ea:68:81
Fingerprint (sha256): e5:71:d5:4c:b8:4b:0d:df:e4:94:a9:01:96:9d:73:9e:17:99:2e:e7:f8:98:31:56:6e:4f:5d:83:11:5e:78:04

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate sporty.co.nz

51

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ashleyrugby.co.nz
badmintonhb.co.nz
bowlsdunedin.co.nz
bowlstaurangasouth.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
canamju.org
canterburybaseball.co.nz
clevedoncricketclub.co.nz
countiesbadminton.co.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
grammartec.co.nz
hastingsintermediate.school.nz
lnissn.org.nz
lynnavon.org.nz
mahedrysdale.co.nz
mahedrysdale.com
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
ncnc.org.nz
netballkapiti.org.nz
netballmanurewa.org.nz
netballtaranaki.org.nz
nscbaseball.co.nz
orfu.co.nz
orokohangamusictrust.co.nz
papakurarugby.co.nz
rollestonrugby.co.nz
smognetball.org.nz
southernrugby.co.nz
southlandmtbclub.co.nz
southlandtriclub.co.nz
sporty.co.nz
stanthony.ac.nz
stjos.school.nz
suburbsrugby.co.nz
taranakihockey.org.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
uniss.co.nz
valleyhockey.org.nz
wmsc.org.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cvHiJUdHcUEaNESWDN6
PXDb9SSW+LIYmM7o1XUGNFuko8A8jNYNfHBaljWS8MqOZWCXEZknT0Z9ZPSTtwDB
HLAQwPSfX/wiRXIWf7qvxn/CjSVU3kTOLwUodusnbNbTh549PMGNOd9L2VS5V5ir
t4zPxsAPkIPD6ohJBf30qvNhx2eqgbBxgY8xgHhGYEgXhx68rkW5XD5IVAeTOPM+
+SY1NnmYJuDqMRMiIpzHI62VtsTMgw9SAbIXHJri4RyS+vkTrTIjlkUudS7j656X
4YKrp277E3Hwg8xhS3hfO4EzPST38nZSo9PFiSShP+ANR6gpKFYbnAsQx8kEY6Rw
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 396435367854094621224572404575113851720203
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-12 19:50:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 19:50:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26989246338851011476719716958607824393327280089792959322605578319224989621216560590323424170961014545457038364455382446916274274735092035315106199130662403759594817258517556964393830803674840415915108858885341935071351679016560808937346396460778831437369906622184456845661517427940639793043089112557686919005397477839292243357427334417440223595168062522949957112971314145088108325076422449992850824438977627248561905000554509933963133319483613768183359162125884525946101429601689974636948771476020459075447765553162517227250564844586051946493436260161487278681345960996638051920089067532468330434645219181353276567577
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							eda968f9ca1306e97de01163aad0b278dc0c6fde
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1047 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bc54c72960000040300473045022078eceef6cb1671d1366c38a25412a119657396b0675f678561b17f741eb2cba7022100bff2dfbb46a2ea507de6cce4569a2393831934a2e4be868705bb2559dcc75bb9007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bc54c729200000403004730450221008ae0a221cc5336873fd136c82747b542faa5b0bbbd1fb3957f8719e49fb2eba202206917bd9b0fa31128b255fdc2cc267be0dc197b77d76c022e8c3fdc35d34fc1f7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00757d70a0906f4f2efc83f30f694ff23d26f597e3335aa71d08872ed0d7299b814fef5093e93ae837f0f68b44fb7c5479b0104d279056dae2793eb0b4aa5921e6cbf13a828e1b3af3bdcb43e70a4c2e3701ad298a3ec3d022c407bf19d0fb820e85b79219c8d08f0cbf945898046fb33a4c70818424ab3dbac2c51f7df3dcc7f570c26dc48604b62381553975aa424259dace34a911a19b7b55b56baf802e2b2023007a201f232b26a837b7140ba83507443acf7a2309fdcc8d9ab34a308708f86b18003356463413be19c145d928593298c72c2525c994cc0b1635b61a52d28b42a7e182febe1eafcf46f0fa828049b90d0cc11460b82871460df3656edd9c73