www.unimountafc.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:e0:75:d5:31:62:1f:78:5e:f3:73:df:15:6e:0b:a4:f6 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.unimountafc.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:e0:75:d5:31:62:1f:78:5e:f3:73:df:15:6e:0b:a4:f6
Serial Number (int): 332073666641769064724256400306177739302134
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 37:80:31:11:eb:08:4c:66:8d:55:d5:1f:ca:c6:fa:e4:f8:e2:dd:9f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 77:95:d1:69:3b:c9:57:60:28:f0:a2:f1:fd:aa:84:99:d2:62:2a:b2
Fingerprint (sha256): e9:85:b2:5e:d5:bb:ed:36:f0:89:a7:31:06:5f:46:81:90:5a:bd:83:9f:da:12:60:25:b0:8c:ab:87:9c:a2:b7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.unimountafc.org.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.unimountafc.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.aoraki-dragons.co.nz
www.ardmoremarist.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.bayolympic.co.nz
www.bbafc.org.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.bowlssouthland.co.nz
www.brooklyncroquetclub.org
www.burwoodafc.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.capitalfootball.org.nz
www.carltonjuniorsrugby.co.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmydt.co.nz
www.cornwallcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.footballsouth.co.nz
www.foxtongolf.co.nz
www.glenviewsoccer.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.helensvillerugby.co.nz
www.karakasportspark.co.nz
www.katikatifc.co.nz
www.kbhs.school.nz
www.keirunga.org.nz
www.mainlandfootball.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.nelsonbaysfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nhrra.co.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.otahuhusoccer.org.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.pcbasketballclub.co.nz
www.ravensbourne.co.nz
www.rivertongolf.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.slalomnz.org.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportcanterbury.org.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.sydenhamrugby.co.nz
www.takapunaafc.co.nz
www.taradalefootball.org.nz
www.tcafc.co.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.turbotouch.org.nz
www.unimountafc.org.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihoraclaytarget.co.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.wakefieldfc.nz
www.westernafc.com
www.worldseriescricket.co.nz
www.wssfa.nz

Other certificates including the domain name unimountafc.org.nz

(limited to 100 certificates)
maristinvercargill.co.nz
amdg.org.nz
sportnorthland.co.nz
www.akaranacityrifleclub.co.nz
hockeymanawatu.org.nz
www.nzfootball.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
hockeymanawatu.org.nz
maristinvercargill.co.nz
www.pukekohesoftball.co.nz
amdg.org.nz
maristinvercargill.co.nz
maristalbion.co.nz
www.mooloocommunityrugby.co.nz
www.christchurchmetrocricket.co.nz
www.unimountafc.org.nz
www.crossrecreationcentre.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.pauanuilifeguards.org.nz

Certificate

The complete raw certificate details for www.unimountafc.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhqk0l2jzHndaDHcPUXkg
pEJwVHJBEELZTjUwyLiL6PBYdUq7QmpMhb1l6KeuRLUVPOJiUqPOJSjmkbwi/lUG
C+267tBmmNsEjre0ITPzc2i90Ky1Z4VPykws0pvkmqcHCokIpi+IrdOrZot/9gni
pkQfE+mQvezHX+VVT0tHtuJYojz6NoKSHG7tAYsTrfXn1kc6tTt7OkoX57uACFEk
w7sYl1M1bzMeWPYWbufQOgvixzIP2wrGflyJjCpfWrXJEad7zaEg0uh9FB1JRq+N
JbLCZqJHdgwbTNNljeajaI4USK0Os+tZPVYzkxqiED8xeZk34A9jb5m1oAzQKPHZ
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332073666641769064724256400306177739302134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 11:22:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 11:22:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.unimountafc.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16999371175402777832027052890993039976758584145462455173927930968838961285838013366010679281407393011283456398343552717387057824169041952195429487692118348628708590234749837107799738080928550075861725417380370456304496638554489716172269548426383430576155732704237155926609270559483742233697093289374305562686035892833788207534390599321028646234150299613851454961854604209068027057531768119216478381621414049944539963009139743820127450839674400376594606284000986591230882269898988084660022409398940549234241968911633870333013506856888249598607917319130667147728123034747877044688240124775749586029409372934803920378209
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							37803111eb084c668d55d51fcac6fae4f8e2dd9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016fec1a48fa00000403004730450220223b8be626c6ffced2789fa8e8ef121865a32dd168a88cc8b4ecca7a4809eae002210099315930283a45f800ccc9f4952fc06e2237516b7356c4449f59743a478aee9000770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fec1a48ff0000040300483046022100dffe2d1e321768743d92fff06664186c5c675e9dd35e777566a32e5462a65b83022100bcd762fff010a7b7dafd52db8827da914dd89acebe8426265eccf7e8443fa91d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008539115ca2e4f679d9f02acbb22334730cefd7665f930819749e0d10624a31676f6e5e82af1ab32a2f92e8dd6b22fde413d5d189840d5573b8b7a64d5a8ca1dda1ba3583d93a915e32c26f4bd756a40327ef1ad3d9f0ff5f5c46d3072ca012b07da8655c5110976fbc5b28125bbd7d3fadfdbaccc84d1f742e1736ca13ec30ec46ddff432a09beb2a3c26f4ff4c74407ac7d3e46b68f22ef771966f43614525efaf6f5388588529422185f66e0a3d6e7da73083fb0ef7daacd4d268e6282c4b17013dece10c842fbef4c3fbd636ac260abedb2040916c1a8f0cfd0e0bcea96f6dd6356ea1d04d1b059cb7e79c38ca04429fe7b85699eb3c4358615a7dac9a485