loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c6:1a:ae:82:c8:44:93:9e:5d:6a:4f:9c:21:4d:ae:e0:53 was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c6:1a:ae:82:c8:44:93:9e:5d:6a:4f:9c:21:4d:ae:e0:53
Serial Number (int): 328748232485750452996513203521447053418579
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e1:0b:b2:90:21:6f:1f:c3:54:8e:4e:00:af:16:b2:18:be:d0:69:17
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): a2:8e:1b:7b:de:92:4a:b6:f4:b2:67:e5:94:b9:ec:6f:52:4a:58:9b
Fingerprint (sha256): ec:2f:6a:cb:04:d8:02:ba:62:05:8b:d4:1f:5c:83:4f:bb:2d:b9:f2:d2:b0:48:b6:19:4d:90:60:fd:f4:6a:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
beta.jucy.com
beta.jucy.com.loadbalancer.nix.jucy.co.nz
beta.jucy.com.web1.nix.jucy.co.nz
beta.jucy.com.web2.nix.jucy.co.nz
content.jucy.com
cp.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucy.com.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucycruize.co.nz
jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
jucycruize.co.nz.web1.nix.jucy.co.nz
jucycruize.co.nz.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
opperations.jucy.co.nz
opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz
opperations.jucy.co.nz.web1.nix.jucy.co.nz
opperations.jucy.co.nz.web2.nix.jucy.co.nz
staging.jucy.com
staging.jucy.com.loadbalancer.nix.jucy.co.nz
staging.jucy.com.web1.nix.jucy.co.nz
staging.jucy.com.web2.nix.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucy.com.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucycruize.co.nz
www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruize.co.nz.web1.nix.jucy.co.nz
www.jucycruize.co.nz.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWu5YGCqpEv3NSOVIdow
zn/dGEh09ze1nW11rlV6ycfQgvz29lSP/WVctlGYErjyjUGFSko4JTcHOzFuw9/4
8bYgx5GAAJCWQyPWB6Y7W5q0ocXfR8oGBZUuwjpq7Tzuo2nbH2j61Pc/9BWAAWxF
BDLd8DGFQ1hw7kokZWECzpErTOb1wAA1/WgsE5MdAhesgppCL4hxRT4OEApTdMe/
agUTzUbBCM6w5nEi9YR8ZGu06FJu8t08gIR6BYvlTB4t9tX7iY9CXdXOWtbNEVi/
qdZjNy9JXN7SWTO7PpMUbDu1exQdOAQiCcyBYvXCz977ZwV/CZdqsbe1rj9MyVGN
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 328748232485750452996513203521447053418579
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-18 23:47:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 23:47:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23912160385374885641405142819396291566380662475314879336323999337926243009696159017491467647352473792261528903281173133997738295921362537513392032779265724367700042534791763958027508080499651638774300752020560121705390318604635753926518725221119644895302750570385952546002150779192585542023251331149633301872001130430839708770427549851186937090062022708044905209833894215261864406570039801661223638928268343029166475155195983536556958136531221046974346516842058512391171634993976531119353744613496686872448713364741670016977155077315748103869437508140263698585058272083117168056708667490628166756476209342341354458541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e10bb290216f1fc3548e4e00af16b218bed06917
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2739 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruize.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opperations.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruize.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000170f042bf8600000403004830460221009ac9b9919d959ba31431db7494fdecba7d2b8a47294c95f7e9e8453fcfee465e0221009d7d3b80a680e17657096e32dbe695319fbba17446f28bd991782511921453b1007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e00000170f042bf6d0000040300463044022003bce4a131554ffcb5ecd3e8853f1a88805e09d03d019e5fddfaf8c681c8f780022009fbde46d443e8451e612798ce1e45a879e0e8ca35ae85f0250e610f300182e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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