www.skeggsfoundation.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a2:7d:6c:fd:b1:c0:52:4d:b4:72:80:3b:76:b0:27:21:31 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.skeggsfoundation.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a2:7d:6c:fd:b1:c0:52:4d:b4:72:80:3b:76:b0:27:21:31
Serial Number (int): 316629320649539142376086437527311064965425
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 59:58:4d:8b:e8:71:b5:13:38:46:16:43:19:dd:30:bf:1f:5a:5a:48
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 64:e7:8f:83:14:16:97:80:d4:31:36:67:96:92:29:6a:95:2f:b7:b4
Fingerprint (sha256): eb:93:74:dd:63:01:f2:3a:59:6d:27:70:c1:fc:b6:2f:ab:53:6f:18:4a:50:8e:90:22:6d:36:89:f2:1d:46:ed

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.skeggsfoundation.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.skeggsfoundation.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ams.school.nz
www.arrowtownrugby.co.nz
www.athleticsotago.co.nz
www.aucklandsoftball.org.nz
www.basketballhawkesbay.co.nz
www.bluerovers.co.nz
www.canoepolohb.co.nz
www.cashmere.school.nz
www.cfc.co.nz
www.christchurchfootballclub.co.nz
www.countiesmanukaurugbyleague.co.nz
www.cra.kiwi
www.cricketwellington.co.nz
www.darel.co.nz
www.ellerslieeagles.co.nz
www.fenciblefoundation.co.nz
www.freyberg.ac.nz
www.gijfc.co.nz
www.golfnorthland.co.nz
www.greenacrescountry.org.nz
www.harbourgolf.co.nz
www.hastingsboys.school.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hbnetball.co.nz
www.hbrugby.co.nz
www.healthyfamilieswaitakere.org.nz
www.hjac.org.nz
www.hockeywanganui.org.nz
www.hokowhitubridge.org.nz
www.horouta.co.nz
www.huianetball.co.nz
www.ie19.co.nz
www.ie19.nz
www.jonesyyouthfoundation.co.nz
www.kartsport.org.nz
www.kirweerugby.co.nz
www.kiwitagnz.co.nz
www.leamingtonrugby.co.nz
www.lindisfarne.school.nz
www.lrsc.co.nz
www.manawatusoftball.co.nz
www.manawatusoftball.org.nz
www.maniapoto.school.nz
www.manukauaucklandvolleyball.co.nz
www.maoribasketball.com
www.maristalbion.co.nz
www.marlboroughnetball.org.nz
www.marlboroughtrampingclub.co.nz
www.membermanager.co.nz
www.mff.nz
www.mitre10park.co.nz
www.mountsports.co.nz
www.naenaeswimclub.co.nz
www.northgolf.nz
www.nzteachersgames.co.nz
www.otakisportsclub.co.nz
www.parklandsrugby.co.nz
www.patoka.school.nz
www.pbhockey.co.nz
www.pioneerfishingclub.co.nz
www.polo.org.nz
www.ponsonbyrugby.co.nz
www.porthillunited.co.nz
www.prebbleton.com
www.referees.co.nz
www.rotoruaunited.co.nz
www.shirleyrugby.co.nz
www.sked.co.nz
www.skeggsfoundation.nz
www.soulutionzsports.nz
www.sportsafe.co.nz
www.sporty.org.nz
www.sportycrm.co.nz
www.sportycrm.com
www.st-marys-wellington.school.nz
www.stmaryswellington.school.nz
www.stmw.school.nz
www.taradaleint.school.nz
www.tepukeunitedfc.co.nz
www.volleysouth.org.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.westshore.school.nz
www.whangareibridgeclub.nz

Other certificates including the domain name skeggsfoundation.nz

(limited to 100 certificates)
www.giafc.co.nz
www.sportsground.com
fdmc.school.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
mmc.school.nz
sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz

Certificate

The complete raw certificate details for www.skeggsfoundation.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0g2qGCbiM4ZP1tcOegKy
JEaT8aB85gL6uT5SZcv6aEMjQXHayFsfN3DZ6LiBEQ3IZjy32zbGH1og41/mV+X/
R9+VLTR8xxWUuXFj9Z2pSMqt6yrqZGTwV+JzWnZo/TLPMoyB3BI5valI5oUibsSn
x/GUCML6ywRIhbSiGGk02iNZzm0wQlGXoY1HrfXwjovc0U41o/zh6vOPq/u8Aaab
zFMCnciCEUM3cm5dwaR7RvsD7Luow2zrLH3xsm635pSwzhqrmYUX0pBFAWoIP3pP
D79qDVfKHtsOMV+HRTfOWNtfQ7l57mhfpW9tpApQip+plcTGKnDjDVVAAdxVdoNR
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316629320649539142376086437527311064965425
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-28 07:19:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-27 07:19:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.skeggsfoundation.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26516782224947988920164197533330787061283457771967659194067322644151135893225671390109597176662257609648682234505277906623576647061687245425920844272736572520954064158598807167735489592463294010269472617795929461855093182530125462179973759527028837223165888844306097463290455430456224248540577546841454165422163386370198728489947127235755222326359503522159802884314398872193520970859450982141801215096599465069947045120406169556984914825206373648926201525231304313302377632712762747150366048431611857295365876862369808875306033542958896585668323159967783586806490456946104631843902710413953870713338756954619843400139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59584d8be871b5133846164319dd30bf1f5a5a48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ams.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticsotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoepolohb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cra.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cricketwellington.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darel.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fenciblefoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.freyberg.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gijfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsboys.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamilieswaitakere.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hjac.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ie19.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jonesyyouthfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kartsport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwitagnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leamingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lindisfarne.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lrsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manawatusoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maniapoto.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukauaucklandvolleyball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mff.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mitre10park.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naenaeswimclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pbhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porthillunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbleton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rotoruaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shirleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skeggsfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.soulutionzsports.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsafe.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportycrm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleysouth.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareibridgeclub.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016feb3c499f0000040300483046022100e5417fbe62f97d976e30b8584902bc4a8fbd76275b46825d82fdb29b12198751022100e7e0ccb4bb4b08f728ef3131faaa972becd88f4f189f50f7f6ee271aae5ac72c00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016feb3c49c90000040300473045022100ae95ec49afdfc20b967b0bdc5ff6616176bbccb6343ccb0d1555fd3d5a0c839e022016fe05a76f845ba0967d7356889767e152da8ccc27c34585259afcd5a47b9bc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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