www.ams.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:9d:13:17:12:53:3b:2e:74:aa:48:fd:31:1b:b4:a6:81:58 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.ams.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9d:13:17:12:53:3b:2e:74:aa:48:fd:31:1b:b4:a6:81:58
Serial Number (int): 314786564528293364537759027612602335658328
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d3:85:a4:44:69:f2:7d:e6:01:41:6f:ad:2d:97:d8:18:50:1a:9d:56
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 09:48:6b:fd:10:76:18:3a:55:eb:c5:52:29:18:cf:16:ba:7d:15:4b
Fingerprint (sha256): e6:d5:16:ed:4d:d2:6f:19:06:8d:7d:c0:99:16:da:e3:41:49:5b:15:77:3a:3a:08:67:c2:3b:d3:2f:1d:fa:fc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.ams.school.nz

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ams.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ams.school.nz
www.athleticsotago.co.nz
www.aucklandsoftball.org.nz
www.basketballhawkesbay.co.nz
www.bluerovers.co.nz
www.canoepolohb.co.nz
www.cashmere.school.nz
www.cfc.co.nz
www.christchurchfootballclub.co.nz
www.countiesmanukaurugbyleague.co.nz
www.cra.kiwi
www.cricketwellington.co.nz
www.darel.co.nz
www.ellerslieeagles.co.nz
www.fenciblefoundation.co.nz
www.freyberg.ac.nz
www.gijfc.co.nz
www.golfnorthland.co.nz
www.greenacrescountry.org.nz
www.harbourgolf.co.nz
www.hastingsboys.school.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hbnetball.co.nz
www.hbrugby.co.nz
www.healthyfamilieswaitakere.org.nz
www.hjac.org.nz
www.hockeywanganui.org.nz
www.hokowhitubridge.org.nz
www.horouta.co.nz
www.huianetball.co.nz
www.ie19.co.nz
www.ie19.nz
www.jonesyyouthfoundation.co.nz
www.kartsport.org.nz
www.kirweerugby.co.nz
www.kiwitagnz.co.nz
www.leamingtonrugby.co.nz
www.lindisfarne.school.nz
www.lrsc.co.nz
www.manawatusoftball.co.nz
www.manawatusoftball.org.nz
www.maniapoto.school.nz
www.manukauaucklandvolleyball.co.nz
www.maoribasketball.com
www.maristalbion.co.nz
www.marlboroughnetball.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.mff.nz
www.mitre10park.co.nz
www.mountsports.co.nz
www.naenaeswimclub.co.nz
www.northgolf.nz
www.nzteachersgames.co.nz
www.otakisportsclub.co.nz
www.parklandsrugby.co.nz
www.patoka.school.nz
www.pbhockey.co.nz
www.pioneerfishingclub.co.nz
www.polo.org.nz
www.ponsonbyrugby.co.nz
www.porthillunited.co.nz
www.prebbleton.com
www.referees.co.nz
www.rotoruaunited.co.nz
www.shirleyrugby.co.nz
www.sked.co.nz
www.skeggsfoundation.nz
www.soulutionzsports.nz
www.sportsafe.co.nz
www.sporty.org.nz
www.sportycrm.co.nz
www.sportycrm.com
www.st-marys-wellington.school.nz
www.stmaryswellington.school.nz
www.stmw.school.nz
www.taradaleint.school.nz
www.tepukeunitedfc.co.nz
www.volleysouth.org.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.westshore.school.nz
www.whangareibridgeclub.nz

Other certificates including the domain name ams.school.nz

(limited to 100 certificates)
www.ams.school.nz
www.ams.school.nz
www.giafc.co.nz
www.ams.school.nz
www.ams.school.nz
www.sportsground.com
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.ams.school.nz
www.skeggsfoundation.nz
www.ams.school.nz
www.ams.school.nz

Certificate

The complete raw certificate details for www.ams.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZTCCDE2gAwIBAgISA50TFxJTOy50qkj9MRu0poFYMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwMDE5MzRaFw0y
MDA2MDIwMDE5MzRaMBwxGjAYBgNVBAMTEXd3dy5hbXMuc2Nob29sLm56MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YzxKhhRpf+nS3E8E9wOeAJsGjxB
jeSiGL/s5G7RtVBb4lLLmx3gjn4pBjb4eDwwXTAPoPH81RhW/wK2CMnsZSU6NvDw
pFE9vLPcFvrUUAx1XHTDuadRrzZH2DzFigd439xx08XQ2+zosWQ0qPEdlJH6c9vD
8sIkPtZx6vRT6IVdvRawPngCRwhyvowU526ywz4vLSfH9eG+bUBO2F2NEnhC2WRE
TkR1U+n4aXUM+R9ncxmKQVc09PdiF9DlOIaDLz3SqQgmrfhFv+Sn4mJPFSpNkNnx
bnzxHz7CQGvMCIQm6F2ATWiLuWuC3PRJOdiUxz0aVqb7/bNX2uWQklSS8QIDAQAB
o4IKcTCCCm0wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTThaREafJ95gFBb60tl9gY
UBqdVjAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIIJgYDVR0RBIIIHTCCCBmCEXd3dy5hbXMuc2Nob29sLm56ghh3d3cu
YXRobGV0aWNzb3RhZ28uY28ubnqCG3d3dy5hdWNrbGFuZHNvZnRiYWxsLm9yZy5u
eoIdd3d3LmJhc2tldGJhbGxoYXdrZXNiYXkuY28ubnqCFHd3dy5ibHVlcm92ZXJz
LmNvLm56ghV3d3cuY2Fub2Vwb2xvaGIuY28ubnqCFnd3dy5jYXNobWVyZS5zY2hv
b2wubnqCDXd3dy5jZmMuY28ubnqCInd3dy5jaHJpc3RjaHVyY2hmb290YmFsbGNs
dWIuY28ubnqCJHd3dy5jb3VudGllc21hbnVrYXVydWdieWxlYWd1ZS5jby5ueoIM
d3d3LmNyYS5raXdpght3d3cuY3JpY2tldHdlbGxpbmd0b24uY28ubnqCD3d3dy5k
YXJlbC5jby5ueoIZd3d3LmVsbGVyc2xpZWVhZ2xlcy5jby5ueoIcd3d3LmZlbmNp
YmxlZm91bmRhdGlvbi5jby5ueoISd3d3LmZyZXliZXJnLmFjLm56gg93d3cuZ2lq
ZmMuY28ubnqCF3d3dy5nb2xmbm9ydGhsYW5kLmNvLm56ghx3d3cuZ3JlZW5hY3Jl
c2NvdW50cnkub3JnLm56ghV3d3cuaGFyYm91cmdvbGYuY28ubnqCGnd3dy5oYXN0
aW5nc2JveXMuc2Nob29sLm56ghd3d3cuaGF2ZWxvY2tub3J0aC5ydWdieYIYd3d3
Lmhhd2tlc2JheS5iYXNrZXRiYWxsghp3d3cuaGF3a2VzYmF5bmV0YmFsbC5jby5u
eoITd3d3LmhibmV0YmFsbC5jby5ueoIRd3d3LmhicnVnYnkuY28ubnqCI3d3dy5o
ZWFsdGh5ZmFtaWxpZXN3YWl0YWtlcmUub3JnLm56gg93d3cuaGphYy5vcmcubnqC
GXd3dy5ob2NrZXl3YW5nYW51aS5vcmcubnqCGnd3dy5ob2tvd2hpdHVicmlkZ2Uu
b3JnLm56ghF3d3cuaG9yb3V0YS5jby5ueoIVd3d3Lmh1aWFuZXRiYWxsLmNvLm56
gg53d3cuaWUxOS5jby5ueoILd3d3LmllMTkubnqCH3d3dy5qb25lc3l5b3V0aGZv
dW5kYXRpb24uY28ubnqCFHd3dy5rYXJ0c3BvcnQub3JnLm56ghV3d3cua2lyd2Vl
cnVnYnkuY28ubnqCE3d3dy5raXdpdGFnbnouY28ubnqCGXd3dy5sZWFtaW5ndG9u
cnVnYnkuY28ubnqCGXd3dy5saW5kaXNmYXJuZS5zY2hvb2wubnqCDnd3dy5scnNj
LmNvLm56ghp3d3cubWFuYXdhdHVzb2Z0YmFsbC5jby5ueoIbd3d3Lm1hbmF3YXR1
c29mdGJhbGwub3JnLm56ghd3d3cubWFuaWFwb3RvLnNjaG9vbC5ueoIjd3d3Lm1h
bnVrYXVhdWNrbGFuZHZvbGxleWJhbGwuY28ubnqCF3d3dy5tYW9yaWJhc2tldGJh
bGwuY29tghZ3d3cubWFyaXN0YWxiaW9uLmNvLm56gh13d3cubWFybGJvcm91Z2hu
ZXRiYWxsLm9yZy5ueoIhd3d3Lm1hcmxib3JvdWdodHJhbXBpbmdjbHViLmNvLm56
ghd3d3cubWVtYmVybWFuYWdlci5jby5ueoIKd3d3Lm1mZi5ueoIVd3d3Lm1pdHJl
MTBwYXJrLmNvLm56ghV3d3cubW91bnRzcG9ydHMuY28ubnqCGHd3dy5uYWVuYWVz
d2ltY2x1Yi5jby5ueoIQd3d3Lm5vcnRoZ29sZi5ueoIZd3d3Lm56dGVhY2hlcnNn
YW1lcy5jby5ueoIZd3d3Lm90YWtpc3BvcnRzY2x1Yi5jby5ueoIYd3d3LnBhcmts
YW5kc3J1Z2J5LmNvLm56ghR3d3cucGF0b2thLnNjaG9vbC5ueoISd3d3LnBiaG9j
a2V5LmNvLm56ghx3d3cucGlvbmVlcmZpc2hpbmdjbHViLmNvLm56gg93d3cucG9s
by5vcmcubnqCF3d3dy5wb25zb25ieXJ1Z2J5LmNvLm56ghh3d3cucG9ydGhpbGx1
bml0ZWQuY28ubnqCEnd3dy5wcmViYmxldG9uLmNvbYISd3d3LnJlZmVyZWVzLmNv
Lm56ghd3d3cucm90b3J1YXVuaXRlZC5jby5ueoIWd3d3LnNoaXJsZXlydWdieS5j
by5ueoIOd3d3LnNrZWQuY28ubnqCF3d3dy5za2VnZ3Nmb3VuZGF0aW9uLm56ghd3
d3cuc291bHV0aW9uenNwb3J0cy5ueoITd3d3LnNwb3J0c2FmZS5jby5ueoIRd3d3
LnNwb3J0eS5vcmcubnqCE3d3dy5zcG9ydHljcm0uY28ubnqCEXd3dy5zcG9ydHlj
cm0uY29tgiF3d3cuc3QtbWFyeXMtd2VsbGluZ3Rvbi5zY2hvb2wubnqCH3d3dy5z
dG1hcnlzd2VsbGluZ3Rvbi5zY2hvb2wubnqCEnd3dy5zdG13LnNjaG9vbC5ueoIZ
d3d3LnRhcmFkYWxlaW50LnNjaG9vbC5ueoIYd3d3LnRlcHVrZXVuaXRlZGZjLmNv
Lm56ghZ3d3cudm9sbGV5c291dGgub3JnLm56ghd3d3cud2FpbWFrdW5pdGVkLm9y
Zy5ueoIVd3d3LndhbmFrYWZvb3RiYWxsLm56ghd3d3cud2VzdHNob3JlLnNjaG9v
bC5ueoIad3d3LndoYW5nYXJlaWJyaWRnZWNsdWIubnowTAYDVR0gBEUwQzAIBgZn
gQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5s
ZXRzZW5jcnlwdC5vcmcwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDwlaRZ8gDR
gkAQLS+TiI6tS/4dR+OZ4dA0prCoqo6ycwAAAXCjIGYNAAAEAwBHMEUCIHOW6BGl
OFDCM3U2gMNegweMkbnlbq2U2ui8u+qcZLcrAiEA408ESp+hyHDJGpOV8iuABCIX
t7w9YnLB9LvTGZOTHtQAdQAHt1wb5X1o//Gwxh0jFce65ld8V5S3au68YToaadOi
HAAAAXCjIGY6AAAEAwBGMEQCIHskg+qi/b6bpP25QFlbC5N0Fy3Y1LBYNkvo6In9
xNAtAiA7ipe2DVFbvCB3/c6hg1UChZAtGKQNMe78fmTjzU6dsjANBgkqhkiG9w0B
AQsFAAOCAQEALNbLToLzNY3LcBp1UrouyXqHswEduBACsr1dlDJLaNYKu8nYDmke
zgz/uRRUpmMO10sQq0KKoYG9Xsey7/dSw6H29s7WEVfTWZyPkem0bpHrTMpQDW6U
Azsx87nJ2Qv9suYyLl3v8G0ioCy855KsiNewyQQel1cYZ8XmZC+DKOkIjfG6E2kL
RivJnSSKMHpyHtcCnCQfQCYRreher1g04oMZgafTo6xwmCrx0lWs+ua3y3skMru5
6g8zWrDnUkQiLYUKQmkyxugRUrkVd5/zy1y36edzey+KBf3lvrazfauiC3cm4/KK
XAscgUsf9FBA+t9KZSdt+IfzKZtGLgM5pg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YzxKhhRpf+nS3E8E9wO
eAJsGjxBjeSiGL/s5G7RtVBb4lLLmx3gjn4pBjb4eDwwXTAPoPH81RhW/wK2CMns
ZSU6NvDwpFE9vLPcFvrUUAx1XHTDuadRrzZH2DzFigd439xx08XQ2+zosWQ0qPEd
lJH6c9vD8sIkPtZx6vRT6IVdvRawPngCRwhyvowU526ywz4vLSfH9eG+bUBO2F2N
EnhC2WRETkR1U+n4aXUM+R9ncxmKQVc09PdiF9DlOIaDLz3SqQgmrfhFv+Sn4mJP
FSpNkNnxbnzxHz7CQGvMCIQm6F2ATWiLuWuC3PRJOdiUxz0aVqb7/bNX2uWQklSS
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 314786564528293364537759027612602335658328
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 00:19:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 00:19:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ams.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28978072951718642642866630157777663396318486563970575039568986993045514713074015426645806633640749849794047573149875290423935263455995985122285648686443475167117637085673921966366212050582866859957068160787287092187680896960676847349052469016770380087663220061976806797405175123175196633146791523601838781994000840778167041403108230447269600799314061978815504392078339755895911419188555416789736703212410225142265953899885471380986236695286079125166884502490672049464124368528574714036611633417329204600451689880979618648520466474115168847146586959502156061641763652994435115841325177563105324563234085625092042429169
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d385a44469f27de601416fad2d97d818501a9d56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2077 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ams.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonesyyouthfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb27300000170a320660d000004030047304502207396e811a53850c233753680c35e83078c91b9e56ead94dae8bcbbea9c64b72b022100e34f044a9fa1c870c91a9395f22b80042217b7bc3d6272c1f4bbd31993931ed400750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a320663a000004030046304402207b2483eaa2fdbe9ba4fdb940595b0b9374172dd8d4b058364be8e889fdc4d02d02203b8a97b60d515bbc2077fdcea183550285902d18a40d31eefc7e64e3cd4e9db2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002cd6cb4e82f3358dcb701a7552ba2ec97a87b3011db81002b2bd5d94324b68d60abbc9d80e691ece0cffb91454a6630ed74b10ab428aa181bd5ec7b2eff752c3a1f6f6ced61157d3599c8f91e9b46e91eb4cca500d6e94033b31f3b9c9d90bfdb2e6322e5deff06d22a02cbce792ac88d7b0c9041e97571867c5e6642f8328e9088df1ba13690b462bc99d248a307a721ed7029c241f402611ade85eaf5834e2831981a7d3a3ac70982af1d255acfae6b7cb7b2432bbb9ea0f335ab0e75244222d850a426932c6e81152b915779ff3cb5cb7e9e7737b2f8a05fde5beb6b37daba20b7726e3f28a5c0b1c814b1ff45040fadf4a65276df887f3299b462e0339a6