gonville.school.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b7:50:93:61:a5:2d:69:da:ab:42:c7:23:27:52:dc:c2:30 was issued on by Let's Encrypt.

With 45 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gonville.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b7:50:93:61:a5:2d:69:da:ab:42:c7:23:27:52:dc:c2:30
Serial Number (int): 323715634429593909807516715460934137332272
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 39:8d:08:78:89:9b:61:6f:b9:a7:21:1e:a3:c8:3a:c6:04:ed:59:c0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 40:1d:c1:80:d2:17:09:4c:54:67:01:68:2b:e5:9b:c3:ac:f3:ea:d0
Fingerprint (sha256): ea:10:b4:1a:d3:78:69:35:c7:4b:f0:e9:d1:13:fa:88:e1:04:f4:49:73:ff:64:80:8a:f5:5a:22:02:0a:64:55

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate gonville.school.nz

45

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gonville.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gonville.school.nz
netballchristchurch.org.nz
omusc.org.nz
sporty-production.trafficmanager.net
www.aucklandleague.co.nz
www.aurfc.co.nz
www.avalonrugby.co.nz
www.canterburywaterpolo.org.nz
www.centralcitybaseball.org.nz
www.dunedinnetball.co.nz
www.flaxmillbaymotel.co.nz
www.hastingsrugbyandsports.co.nz
www.hawkesbayrugbyreferees.co.nz
www.hbmagpies.co.nz
www.hbrfu.co.nz
www.hbru.co.nz
www.hni.school.nz
www.magpies.co.nz
www.marsdensport.school.nz
www.montressors.co.nz
www.netballchristchurch.org.nz
www.nzsssc.co.nz
www.nzsssc.org.nz
www.ojcc.org.nz
www.omusc.org.nz
www.pngolf.co.nz
www.purc.co.nz
www.rowandale.school.nz
www.rugbyfoundation.co.nz
www.rugbyfoundation.com
www.rugbyfoundation.nz
www.scrfu.co.nz
www.southlandschoolsport.org.nz
www.sporthb.co.nz
www.sporthb.net.nz
www.sporthbchb.co.nz
www.sporthbwairoa.co.nz
www.sportspay.co.nz
www.storans.school.nz
www.takapunarugby.co.nz
www.touchnz.co.nz
www.touchnz.nz
www.turbotouch.co.nz
www.waikatotouch.co.nz
www.wellingtonsoftball.org.nz

Other certificates including the domain name gonville.school.nz

(limited to 100 certificates)
www.montressors.co.nz
sporty.org.nz
www.bophockey.co.nz
www.sporty.co.nz
www.hbcricket.co.nz
sporty.org.nz
masseyrfc.co.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.hbcricket.co.nz
kjcc.org.nz
www.sporty.co.nz
www.sportsground.com
sporty.org.nz
www.darfieldrugby.co.nz
www.sporty.co.nz
www.sporty.co.nz
gonville.school.nz

Certificate

The complete raw certificate details for gonville.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJaTCCCFGgAwIBAgISA7dQk2GlLWnaq0LHIydS3MIwMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDQwMzE0NDJaFw0y
MDA2MDIwMzE0NDJaMB0xGzAZBgNVBAMTEmdvbnZpbGxlLnNjaG9vbC5uejCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALf9whfQkDb/vwLGZjmxJbj5w+Bd
H+/ZySErSqKa8Zzrqr0SqcFIYsIx4e19/sd5zcyMRxCg+lghC7iYGccxQIc10bEP
3QVg8sRVaMRb7uRk6+O31JFZKCHsxOy6TQMemOOd2mxc558BxlSWUvBv/EkZ3uhH
hHvqNJQEK5n/YcKhhXEFWN4CU0idXarKBWcyH7TCzWUQv/5bGil81qE59HHJqnqy
LnE5obbiOZYCErHr/i1ehz7EGddFPCYPG1ogGY65vaIVbUfXWok0YzGFWGysEj6l
ydxBmBzJNO+1dxKpFvaKbhdvJWYk6GOQ2bBKrz9yCxTAr9PA7rxTBJv8AAUCAwEA
AaOCBnQwggZwMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUOY0IeImbYW+5pyEeo8g6
xgTtWcAwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCBCgGA1UdEQSCBB8wggQbghJnb252aWxsZS5zY2hvb2wubnqCGm5l
dGJhbGxjaHJpc3RjaHVyY2gub3JnLm56ggxvbXVzYy5vcmcubnqCJHNwb3J0eS1w
cm9kdWN0aW9uLnRyYWZmaWNtYW5hZ2VyLm5ldIIYd3d3LmF1Y2tsYW5kbGVhZ3Vl
LmNvLm56gg93d3cuYXVyZmMuY28ubnqCFXd3dy5hdmFsb25ydWdieS5jby5ueoIe
d3d3LmNhbnRlcmJ1cnl3YXRlcnBvbG8ub3JnLm56gh53d3cuY2VudHJhbGNpdHli
YXNlYmFsbC5vcmcubnqCGHd3dy5kdW5lZGlubmV0YmFsbC5jby5ueoIad3d3LmZs
YXhtaWxsYmF5bW90ZWwuY28ubnqCIHd3dy5oYXN0aW5nc3J1Z2J5YW5kc3BvcnRz
LmNvLm56giB3d3cuaGF3a2VzYmF5cnVnYnlyZWZlcmVlcy5jby5ueoITd3d3Lmhi
bWFncGllcy5jby5ueoIPd3d3LmhicmZ1LmNvLm56gg53d3cuaGJydS5jby5ueoIR
d3d3LmhuaS5zY2hvb2wubnqCEXd3dy5tYWdwaWVzLmNvLm56ghp3d3cubWFyc2Rl
bnNwb3J0LnNjaG9vbC5ueoIVd3d3Lm1vbnRyZXNzb3JzLmNvLm56gh53d3cubmV0
YmFsbGNocmlzdGNodXJjaC5vcmcubnqCEHd3dy5uenNzc2MuY28ubnqCEXd3dy5u
enNzc2Mub3JnLm56gg93d3cub2pjYy5vcmcubnqCEHd3dy5vbXVzYy5vcmcubnqC
EHd3dy5wbmdvbGYuY28ubnqCDnd3dy5wdXJjLmNvLm56ghd3d3cucm93YW5kYWxl
LnNjaG9vbC5ueoIZd3d3LnJ1Z2J5Zm91bmRhdGlvbi5jby5ueoIXd3d3LnJ1Z2J5
Zm91bmRhdGlvbi5jb22CFnd3dy5ydWdieWZvdW5kYXRpb24ubnqCD3d3dy5zY3Jm
dS5jby5ueoIfd3d3LnNvdXRobGFuZHNjaG9vbHNwb3J0Lm9yZy5ueoIRd3d3LnNw
b3J0aGIuY28ubnqCEnd3dy5zcG9ydGhiLm5ldC5ueoIUd3d3LnNwb3J0aGJjaGIu
Y28ubnqCF3d3dy5zcG9ydGhid2Fpcm9hLmNvLm56ghN3d3cuc3BvcnRzcGF5LmNv
Lm56ghV3d3cuc3RvcmFucy5zY2hvb2wubnqCF3d3dy50YWthcHVuYXJ1Z2J5LmNv
Lm56ghF3d3cudG91Y2huei5jby5ueoIOd3d3LnRvdWNobnoubnqCFHd3dy50dXJi
b3RvdWNoLmNvLm56ghZ3d3cud2Fpa2F0b3RvdWNoLmNvLm56gh13d3cud2VsbGlu
Z3RvbnNvZnRiYWxsLm9yZy5uejBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEE
AYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9y
ZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AAe3XBvlfWj/8bDGHSMVx7rmV3xX
lLdq7rxhOhpp06IcAAABcKPAvp0AAAQDAEcwRQIgcTPUa3zwT0QEN58uLfaGvuWI
PC2GLyCLMHdbo7a1940CIQDOfXe024lNr4cYpFAEYoye4+uRr0bMSoUQS+R6NAS/
QQB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAABcKPAv4MAAAQD
AEcwRQIgYGAv3u8eiVkwTpPGhq1NnW3HK9w/XKkngD8Re9a2pZ8CIQC8Pud4KXs9
ab/wR4INjkgp7W/n6mrwmDgOX2GnHWV37jANBgkqhkiG9w0BAQsFAAOCAQEAiwIm
PNx3ZVRWXkKypb8ct2Aa3Af5g1kwP3g1YxZp8r80Z4KuObkQ/1Lr6aRTgE/Nt3EE
9X/9l2tkTRxsgI0rrUHdB8Ok39HqHxRXpUZRmzHWdyaP97I99hUeGYB0GL2MJZH6
/QJKZpY/ZsMbHVloijxPZlmtRve5PL/AUnY8lLCcWJFRGspZHCgCk+hM8NpKjJcn
D93BS+uZDns+FMY4iOsNpSDyKr8L/SgUwI928vgU+0yUQYG/WlhtDusQE+4vVI8n
JxR1NdEgB3/AlokkDsQv5/SXRs0h7IQqzhKVV8ThG5x2pY89Rg44P1X7ucTEpjDB
gxOTvq9NEFE6Kd0CHQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/3CF9CQNv+/AsZmObEl
uPnD4F0f79nJIStKoprxnOuqvRKpwUhiwjHh7X3+x3nNzIxHEKD6WCELuJgZxzFA
hzXRsQ/dBWDyxFVoxFvu5GTr47fUkVkoIezE7LpNAx6Y453abFznnwHGVJZS8G/8
SRne6EeEe+o0lAQrmf9hwqGFcQVY3gJTSJ1dqsoFZzIftMLNZRC//lsaKXzWoTn0
ccmqerIucTmhtuI5lgISsev+LV6HPsQZ10U8Jg8bWiAZjrm9ohVtR9daiTRjMYVY
bKwSPqXJ3EGYHMk077V3EqkW9opuF28lZiToY5DZsEqvP3ILFMCv08DuvFMEm/wA
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323715634429593909807516715460934137332272
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 03:14:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 03:14:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gonville.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23226742629080958456317627088707952195929289321408974646510004574830613758085906065372900799356386462472448755235625860969639360106554133184116724177972015552855917493489536455214663819249193447288122752006808293125801884560931939138252730750567522238719178956561279895832726327647316374054754013113638168347525180408154309629412450824770330995299443169757860154243314157864341878990833756491100926620604144355600273414476318916681280972947164262185926659034927375054932137766230870326105430892172804972792790750974437311648525865937645879356240330349757417335207561555221314219490407878557960370154851691499913740293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							398d0878899b616fb9a7211ea3c83ac604ed59c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1055 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gonville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sporty-production.trafficmanager.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aurfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralcitybaseball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flaxmillbaymotel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsrugbyandsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbayrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.montressors.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballchristchurch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsssc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ojcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omusc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.purc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandschoolsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthb.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbchb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporthbwairoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportspay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a3c0be9d000004030047304502207133d46b7cf04f4404379f2e2df686bee5883c2d862f208b30775ba3b6b5f78d022100ce7d77b4db894daf8718a45004628c9ee3eb91af46cc4a85104be47a3404bf410076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a3c0bf830000040300473045022060602fdeef1e8959304e93c686ad4d9d6dc72bdc3f5ca927803f117bd6b6a59f022100bc3ee778297b3d69bff047820d8e4829ed6fe7ea6af098380e5f61a71d6577ee
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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