keirunga.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:79:2c:c7:71:fe:90:25:f7:3e:7b:53:b2:52:14:29:19:66 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=keirunga.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:79:2c:c7:71:fe:90:25:f7:3e:7b:53:b2:52:14:29:19:66
Serial Number (int): 302570545803684528978554476216166868654438
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 22:bf:e0:a4:38:f9:56:58:12:37:56:3e:42:d9:95:1e:8f:8e:2f:2d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:2e:1b:d6:55:3a:4b:44:c7:b6:59:f0:42:1f:c4:f7:55:60:78:a7
Fingerprint (sha256): e6:66:d5:00:78:de:74:02:94:8a:21:62:33:79:c3:96:dd:63:c6:3c:0f:ea:51:3f:8a:f4:b9:92:b6:58:de:36

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate keirunga.org.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for keirunga.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlsdunedin.co.nz
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
cmsport.co.nz
collegerifles.co.nz
countiesbadminton.co.nz
dairyflattennis.co.nz
developyourlegacy.co.nz
diamondblacks.co.nz
diamondblacks.com
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
distanceridingnewzealand.co.nz
gameoftwohalfwits.com
ghryc.co.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hrc.org.nz
keirunga.org.nz
kereru.school.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
mahedrysdale.co.nz
mahedrysdale.com
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
myhockey.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
orokohangamusictrust.co.nz
poolburn.school.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
runwalkseries.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
waitematarowing.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name keirunga.org.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
waibopfootball.co.nz
sporty.co.nz
www.katikatifc.co.nz
keirunga.org.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
keirunga.org.nz
karakasportspark.co.nz
www.waitakerecityfc.org.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
keirunga.org.nz
www.aucklandsoftball.org.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
www.schoolground.nz
maristinvercargill.co.nz
whangareirowingclub.org.nz
keirunga.org.nz
www.unimountafc.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for keirunga.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM1zCCC7+gAwIBAgISA3ksx3H+kCX3PntTslIUKRlmMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA5MTYxMzMwMTZaFw0x
OTEyMTUxMzMwMTZaMBoxGDAWBgNVBAMTD2tlaXJ1bmdhLm9yZy5uejCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAINmJi39e4tH0eE1IwotulKl23PHUz5B
ZHSOQ+DGWUYTBj1gs9prJldnBm83+KWNFRzywPwl9U57T/oDkxe2q7QMTQfbQYGt
PL0y4DMmMluvdGb/vcT5JNcdbsIiMQ/mdU7yYvgtbnU+kFWG7AiXul8b/1zKJDC/
INPE2i0LjXSrS8YOcAt2LGIgAp1NzX0hGXcbxmiM8dti4INWY9szCOA59PiNSbMF
9DKCRqSBcjaKW1rEKlH2GqC+UZyfeqRfTicqOQnYLqtOvG0OA/tLm3U4we3pwg6e
hVwH6nFKhYUFhAeNsLrX3FBdUpZKKbMdH8yI7170bbmPFZc9kATkCFMCAwEAAaOC
CeUwggnhMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUIr/gpDj5VlgSN1Y+QtmVHo+O
Ly0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEE
YzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5cHQu
b3JnLzCCB5kGA1UdEQSCB5AwggeMghdhdGhsZXRpY3N3YW5nYW51aS5jby5ueoIW
YXVja2xhbmRiYXNlYmFsbC5jby5ueoIXYXVja2xhbmRmb290YmFsbC5vcmcubnqC
G2F1Y2tsYW5kc2VydmljZXJpZmxlLm9yZy5ueoIYYmFzZWJhbGxuZXd6ZWFsYW5k
LmNvLm56ghZiYXNlYmFsbG5ld3plYWxhbmQuY29tghZiYXNlYmFsbG5ld3plYWxh
bmQub3Jngg5iYXNlYmFsbG56LmNvbYISYm93bHNkdW5lZGluLmNvLm56ghhib3ds
c3RhdXJhbmdhc291dGguY28ubnqCFWJvd2xzd2VzdGNvYXN0Lm9yZy5ueoIXYnVz
aW5lc3NoYXdrZXNiYXkuY28ubnqCDWNtc3BvcnQuY28ubnqCE2NvbGxlZ2VyaWZs
ZXMuY28ubnqCF2NvdW50aWVzYmFkbWludG9uLmNvLm56ghVkYWlyeWZsYXR0ZW5u
aXMuY28ubnqCF2RldmVsb3B5b3VybGVnYWN5LmNvLm56ghNkaWFtb25kYmxhY2tz
LmNvLm56ghFkaWFtb25kYmxhY2tzLmNvbYIUZGlhbW9uZGJsYWNrcy5vcmcubnqC
EmRpYW1vbmRzcG9ydC5jby5ueoIUZGlhbW9uZHNwb3J0bnouY28ubnqCEmRpYW1v
bmRzcG9ydG56LmNvbYITZGlhbW9uZHNwb3J0cy5jby5ueoIVZGlhbW9uZHNwb3J0
c256LmNvLm56ghNkaWFtb25kc3BvcnRzbnouY29tgh5kaXN0YW5jZXJpZGluZ25l
d3plYWxhbmQuY28ubnqCFWdhbWVvZnR3b2hhbGZ3aXRzLmNvbYILZ2hyeWMuY28u
bnqCEWhjd2F0ZXJwb2xvLmNvLm56ghVoZW5kZXJzb25zcXVhc2guY28ubnqCF2hv
d2lja3NhaWxpbmdjbHViLmNvLm56ggpocmMub3JnLm56gg9rZWlydW5nYS5vcmcu
bnqCEGtlcmVydS5zY2hvb2wubnqCGmxhZGllc3NvY2lhbGN5Y2xpbmcub3JnLm56
gg5saW5maWVsZC5jby5ueoISbGlud29vZHJ1Z2J5LmNvLm56ghBsaW53b29kcnVn
YnkuY29tgg9seW5uYXZvbi5vcmcubnqCEm1haGVkcnlzZGFsZS5jby5ueoIQbWFo
ZWRyeXNkYWxlLmNvbYISbWFraWtpaGkuc2Nob29sLm56ghJtYW51cmV3YW1ldHMu
Y28ubnqCFW1hb3JpYmFza2V0YmFsbC5jby5ueoIXbWFybGJvcm91Z2gtdG91Y2gu
Y28ubnqCCm1tY2MuY28ubnqCEm1vdHVla2F0b3VjaC5jby5ueoIVbW91bnRmb3J0
d2F0ZXJwb2xvLm56ghBteWZvb3RiYWxsLmNvLm56gg5teWhvY2tleS5jby5ueoIQ
bXlzb2Z0YmFsbC5jby5ueoIWbmV0YmFsbG1hbnVyZXdhLm9yZy5ueoIYbmV3emVh
bGFuZGJhc2ViYWxsLmNvLm56ggxuaGJteC5vcmcubnqCEW5zY2Jhc2ViYWxsLmNv
Lm56ggxuenNyYS5vcmcubnqCFG9wb3Rpa2ljb2wuc2Nob29sLm56ghpvcm9rb2hh
bmdhbXVzaWN0cnVzdC5jby5ueoIScG9vbGJ1cm4uc2Nob29sLm56gh1yb3NlZ2Fy
ZGVuc2Nyb3F1ZXRjbHViLm9yZy5ueoIWcm95YWxvYWtyYWNxdWV0cy5jby5ueoIU
cnVnYnlzb3V0aGxhbmQuY28ubnqCHHJ1Z2J5c291dGhsYW5kcmVmZXJlZXMuY28u
bnqCE3J1bndhbGtzZXJpZXMuY28ubnqCF3NvZnRiYWxsYXVja2xhbmQub3JnLm56
gh9zb3V0aGNhbnRlcmJ1cnliYXNrZXRiYWxsLmNvLm56ghNzb3V0aGVybnJ1Z2J5
LmNvLm56ghZzb3V0aGxhbmRibXhjbHViLmNvLm56giBzb3V0aGxhbmRmZXN0aXZh
bG9mcnVubmluZy5jby5ueoISc3BvcnRzZ3JvdW5kLmNvLm56gg10ZWViYWxsLmNv
Lm56ghV0ZW5uaXNtYW5hd2F0dS5vcmcubnqCFHRvdWNoc291dGhsYW5kLmNvLm56
ghR1bHlzc2VzbmVsc29uLm9yZy5ueoIYdXBwZXJodXR0cmlmbGVjbHViLmNvLm56
ghV3YWlrYXJlZ29sZmNsdWIuY28ubnqCF3dhaXJhcmFwYWNhcmNsdWIub3JnLm56
ghZ3YWl0ZW1hdGFyb3dpbmcub3JnLm56ghh3ZWxsaW5ndG9uYmFzZWJhbGwuY28u
bnqCI3dlbGxpbmd0b25iYXNlYmFsbGFzc29jaWF0aW9uLmNvLm56ghV3ZXN0YXVj
a2xhbmRhZmMuY28ubnqCFHdoYW5nYW1hdGFzdXJmLmNvLm56ghp3aGFuZ2FyZWly
b3dpbmdjbHViLm9yZy5ueoIfd2hhbmdhcm9hc3BvcnRmaXNoaW5nY2x1Yi5jby5u
eoIed29vbHN0b25wYXJraW5kb29yYm93bHMub3JnLm56MEwGA1UdIARFMEMwCAYG
Z4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYA4mlLribo
6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFtOns3bAAABAMARzBFAiEA01Ec
ziDhs2BiJ7q84eUxr70KY84+D5EdQpFK2iN6h+gCIH0bWKX5g47hCLTa7vahPvf8
iLuMF1L6mo9Q7EKs7CnCAHYAKTxRllTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH
9HgAAAFtOns3jAAABAMARzBFAiEAjOeUaYyb92D9ZunQ4uOyZ7Kzeqv+QlD7TVe0
BpxrhLcCIB16RzhJvj3DhVa+Vv832P32nv+oNZCAQJw55BmKZWiSMA0GCSqGSIb3
DQEBCwUAA4IBAQAjum9TaCF33WckYVLUSCqKEKB2VV+bce0+qSHgix0mwEs5zlbs
UftgIT/58mPp3e2bnqAo5TL3o0cU3YY1aj5EjIRiUL8r55NMksWCmFHasOO+7hIe
8tQXvunIk2+YZWk8zQTu8lQxjoSFZxiMVqskcYQZUACpM2TmYtlbfzdMkaT1Xv7A
8e69AFEfbc9281xrAAQJsceb5D8KHg/7zK0cEcuc1nQTdCWPlHzQH3XUk2LjM82P
TGZ6Nk6e+fMJJ6uwwWpGwpIyG4LiJGLSy3GGZ4UUbh/hupUKANFCdqfp7dd7SFX2
I0f+BoK45jSVs46tzwFNWJLLqurn4WZrlNBM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2YmLf17i0fR4TUjCi26
UqXbc8dTPkFkdI5D4MZZRhMGPWCz2msmV2cGbzf4pY0VHPLA/CX1TntP+gOTF7ar
tAxNB9tBga08vTLgMyYyW690Zv+9xPkk1x1uwiIxD+Z1TvJi+C1udT6QVYbsCJe6
Xxv/XMokML8g08TaLQuNdKtLxg5wC3YsYiACnU3NfSEZdxvGaIzx22Lgg1Zj2zMI
4Dn0+I1JswX0MoJGpIFyNopbWsQqUfYaoL5RnJ96pF9OJyo5Cdguq068bQ4D+0ub
dTjB7enCDp6FXAfqcUqFhQWEB42wutfcUF1Slkopsx0fzIjvXvRtuY8Vlz2QBOQI
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302570545803684528978554476216166868654438
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 13:30:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 13:30:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'keirunga.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16587589568495859680748599671646043412966010416444054497889126389686192308068754071080743995573808086548538997879739139948239269961219497191176240603990616134804184784579396672607044902048809962693091327347389736872009614985274429409283191648539375881806249741963405088768433153296197952531258414163947124790927683767329001325747269539452123329279974989014262053238445989165887692311707649355655933910639043249285195544817409381936923682974505156986346848899697844912588632968252747214691166243299689674320713228474039095287767358850199347146868730060100764999038392277413643305731310485985041046816011367703690610771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22bfe0a438f956581237563e42d9951e8f8e2f2d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1936 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016d3a7b376c0000040300473045022100d3511cce20e1b3606227babce1e531afbd0a63ce3e0f911d42914ada237a87e802207d1b58a5f9838ee108b4daeef6a13ef7fc88bb8c1752fa9a8f50ec42acec29c2007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3a7b378c00000403004730450221008ce794698c9bf760fd66e9d0e2e3b267b2b37aabfe4250fb4d57b4069c6b84b702201d7a473849be3dc38556be56ff37d8fdf69effa8359080409c39e4198a656892
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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