www.crossrecreationcentre.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:6e:f8:87:5f:c9:20:66:29:c5:98:50:74:7b:40:5f:f3:54 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.crossrecreationcentre.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:6e:f8:87:5f:c9:20:66:29:c5:98:50:74:7b:40:5f:f3:54
Serial Number (int): 299098269602378332299338616739253526197076
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 09:d0:97:a4:d1:69:ed:fc:0a:4d:9a:2d:af:d6:09:0e:85:59:40:61
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:7f:e6:6a:13:7f:a5:c8:a2:5e:2e:51:e0:08:82:79:df:a5:48:f2
Fingerprint (sha256): e9:9f:ed:d9:4d:98:62:e8:01:b3:b1:eb:24:60:c1:d0:86:6d:48:13:52:2e:ad:34:f0:ca:72:6a:36:6a:55:67

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.crossrecreationcentre.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.crossrecreationcentre.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.qmc.school.nz
sport.rosmini.school.nz
www.akaranacityrifleclub.co.nz
www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.badminton.org.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.blokarthb.co.nz
www.bopbadminton.co.nz
www.bowlsbop.co.nz
www.bowlsomanu.co.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.collegesportsportal.co.nz
www.crossrecreationcentre.co.nz
www.darfieldcricket.co.nz
www.fastpitch.co.nz
www.foxtongolf.co.nz
www.frasertechcricket.nz
www.gksports.co.nz
www.goodmanrural.co.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.hawkfootball.org.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.hockeywairarapa.org.nz
www.howicknetball.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kerikerimtbclub.co.nz
www.maristinvercargill.co.nz
www.maristrugby.org.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.morningtonbowlingclub.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.mtsquashclub.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.otumoetaifootball.co.nz
www.papakurarugbyleague.co.nz
www.parklandsunitedsportsclub.net.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sailhbc.org.nz
www.sasfootball.club
www.sasfootball.org.nz
www.sharkssports.co.nz
www.speedway.co.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.tasmanvolley.org.nz
www.ths.school.nz
www.trfu.co.nz
www.unimountafc.org.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.worldpowerlifting.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name crossrecreationcentre.co.nz

(limited to 100 certificates)
www.sportsground.com
supersixes.co.nz
eden.rugby
sporty.org.nz
sporty.org.nz
hbnetball.co.nz
www.sportsground.com
www.cyclingsc.co.nz
sporty.org.nz
www.marlboroughtrampingclub.co.nz
ctfc.co.nz
sporty.org.nz
www.membermanager.co.nz
www.membermanager.co.nz
sporty.org.nz
sporty.org.nz
www.pukekohesoftball.co.nz
sporty.org.nz
www.eden.rugby
sporty.org.nz
eden.rugby
sked.co.nz
golfnorthland.co.nz
www.sporty.org.nz
www.crossrecreationcentre.co.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.crossrecreationcentre.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI0my9Iduy3gP0dI7cZk
GcOY1gyhDsXALKnDW2ra6lh80n+bu0P8mr9CsjepY/5RAS+fTAxbb8VxSxD3UGI5
rhFLME1eEJkwd/JztQ3+k8Z6S7e8g4aveXaOsN2pKxlugZKX+Og+ohlPFqtjxmI5
URtJg7EDzKNGZxE2qPb6DrhEJr/NIPhcIWgBRchuYPbIerUb8WTrhuyRmY1B3E+M
lHkbdelx92Pa5H6IIbGcXfaYE2ounYhXW0FHQIA1Jvxd8LT6hslaZlYC6NbNfitz
7ZdiiSY4ZkIFAUOlsh6oHMynI6qx3b1C4oVShuR05MvJ8KdXS9wEagODiCQm7/8X
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 299098269602378332299338616739253526197076
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-18 22:10:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-16 22:10:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.crossrecreationcentre.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19257826777134143804525336794282676422870441362129389703704535763951249303501437460649556701298834019068043521684823401888555193148341622514427488758809122876202155104017082067867484806573521213770070824428218167917737700753277475048762079152400399166589311677395214498837935635954280705305240033812899153723182859448121101971187060242716642290078995994646718395903393959014855284792806678644934666336075967925009955533226257745362527066393334115802801273878865832642549040411489021862405154944552214603584757342724568849714629129355697491331154467818872346672758778302175638960691479778835720944776919918655089612733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09d097a4d169edfc0a4d9a2dafd6090e85594061
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e80c7ec2a00000403004730450221008af63db1390de5efb27b80177cf7cdebb64320b002abb642ad02cc92e601230b02205ef9e49cedc27a19e63d3dc97276a4d067c1d567309d88935414144dc310312700750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016e80c7ec56000004030046304402206e55bd28a657da97e920e03375f1c599b1af30aeecba5af018206e125a53a1af0220661d05852625013328614195e89547fe64a20cf0555a6c1f26f28a645fd35200
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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