canterburybaseball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:4c:9d:a3:7b:79:09:54:a4:2d:ec:75:a3:c3:ab:9b:ad:78 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=canterburybaseball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:4c:9d:a3:7b:79:09:54:a4:2d:ec:75:a3:c3:ab:9b:ad:78
Serial Number (int): 287407855325324112735591448959342736027000
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1e:da:29:a5:0d:84:fd:b7:17:68:0f:ed:66:4e:f8:ee:b6:3e:5b:c8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3b:82:49:b4:86:74:21:65:31:cc:8c:77:f5:26:73:37:4b:4b:dc:7c
Fingerprint (sha256): e5:9a:20:34:47:b5:d1:a5:83:5a:ff:e7:4b:cb:87:83:89:dd:96:95:2d:b6:aa:dc:83:2a:98:8b:e4:68:a9:3e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate canterburybaseball.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for canterburybaseball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acwpa.co.nz
ashleyrugby.co.nz
aucklandmarist.co.nz
badmintonhb.co.nz
blenheimgolfclub.co.nz
bluffhillbowls.co.nz
bowlswanganui.org.nz
boxingnz.org.nz
bushmultisport.org.nz
cambridgenetball.org.nz
canamju.org
canterburybaseball.co.nz
canterburycommunityrugby.co.nz
canterburyrugby.co.nz
clevedoncricketclub.co.nz
clevedonrifleclub.co.nz
cmih.co.nz
crfu.co.nz
devonportsquash.org.nz
ellesmererugby.org.nz
gisborneharriers.co.nz
glenburniceskatingclub.co.nz
grammarcarlton.co.nz
grammartec.co.nz
halswellcricket.co.nz
hastings-central.school.nz
hastingsintermediate.school.nz
heet.net.nz
manukaumasters.co.nz
manurewarugby.co.nz
maorirugby.co.nz
marewa.school.nz
mariancollege.school.nz
maristfc.co.nz
maristnh.co.nz
marlboroughtennis.co.nz
mchockey.co.nz
midcanterburyrugby.co.nz
mttauharagymnastics.co.nz
mtwellingtonrugby.co.nz
mtwswim.co.nz
ncnc.org.nz
nelsoncarclub.co.nz
netballkapiti.org.nz
netballtaranaki.org.nz
nzpca.org
oacnz.org
ophc.co.nz
orfu.co.nz
papakurarugby.co.nz
paparoa.school.nz
parkvale.school.nz
pickleball.org.nz
pioneerbasketballclub.co.nz
ponekerugby.com
prebbletonnetball.org.nz
primarysportwellington.org.nz
puhoisports.org.nz
rangi.school.nz
rollestonrugby.co.nz
rosmini.school.nz
smognetball.org.nz
southlandmtbclub.co.nz
southlandolympicweightlifting.co.nz
southlandtriclub.co.nz
sportsouthland.co.nz
stanthony.ac.nz
stheliersbowlingclub.co.nz
stjos.school.nz
suburbsrugby.co.nz
taierirugby.co.nz
taniwha.co.nz
taranakihockey.org.nz
tasmanrugbyreferees.co.nz
technicalharriers.co.nz
timarusquashclub.co.nz
touchcanterbury.co.nz
trenthamrifleclub.co.nz
tuakauponyclub.co.nz
ultrarunner.org.nz
uniss.co.nz
valleyhockey.org.nz
volleyballbop.co.nz
waikatotouch.co.nz
wellingtontouch.org.nz
wellsfordsquashclub.co.nz
whtc.co.nz
willowpark.school.nz
wmsc.org.nz

Other certificates including the domain name canterburybaseball.co.nz

(limited to 100 certificates)
www.diamondsportsnz.co.nz
meeanee.school.nz
sporty.co.nz
sporty.co.nz
www.canterburybaseball.co.nz
www.bowlswestcoast.org.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
manurewamets.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
sporty.co.nz
www.waihibeachtennisclub.co.nz
www.diamondsportnz.co.nz
sporty.co.nz
sporty.co.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz

Certificate

The complete raw certificate details for canterburybaseball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaI3Ye/3UjHRarpocm/k
SXFHc+w1Njp/YR1PTijckRfeMuTYkEzN3rYAmlcR7p/jW6UgxW6g8GgT3tXnULny
YpDoa6ke7GhfRz2QiKn33rUF+rsuyftxA8OSmTQsizB7veHi1N34e+sfVJUqoBZa
+hknezC+vRgKxGCDup+DPrxdh6iezJdtSH4+8t7MFKej49fKPyjWt7IAnoLnDkEO
T94zrDmeNayoLBBLog8BpqX1QLM7vm5/vc8UhKWFEOpnXQw2CWLLhdsl9vOENurc
4FdxYV9NWxTT+DE+LXyp9aYPDtbMGFXsk4pnrrwmQcCffm1jGejUFbS0e6L62EQ9
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 287407855325324112735591448959342736027000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 12:52:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 12:52:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'canterburybaseball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18384546077760406874500046460530276703258450587694392203598672079877407927170105214963712842022140392960560205701402176977733811830573527496719678805114787713662897577394543327206217798625348032669835846984343072557408226435093926510382019905860348544045401484726502921374723227481748424658469232462479898936917370512044647113491503497840113436987247767970486758703444344047733351658969828116727786865841128254493477891212929593219454483803979627390963053409290546392262769716187259947262752198247504524099894209386275379388130548862300101750814655851562534206222082339650708251380831572225693534179552847317097004309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1eda29a50d84fdb717680fed664ef8eeb63e5bc8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1878 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devonportsquash.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzpca.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponekerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wmsc.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016e83efc175000004030046304402206ac774c7bc5639a4cf7be21b2254c33200f032874a8ce1d4cb0dd7eea14ba32f02203d7d80581c7266cffbdeb48f91d316948521f63a5bae3a267c48d11a358a7fd400760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e83efc1820000040300473045022100fa59bbe065d2b760eac9eeb0fa63405a496bcea850008857507c71bea7e954e8022072dff69c412eacd7328f0cb39fea74714ce9781153381502430a9685d5e07c94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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