www.christchurchmetrocricket.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:22:64:0c:42:c6:91:22:81:78:35:37:8e:04:67:18:ba:f8 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.christchurchmetrocricket.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:22:64:0c:42:c6:91:22:81:78:35:37:8e:04:67:18:ba:f8
Serial Number (int): 273039444732104568762987627257446079707896
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 16:de:fe:fa:2c:72:40:05:53:dc:68:81:88:14:8d:ed:4a:e4:a4:3d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 68:a4:3b:ca:e6:67:b7:38:06:63:37:ab:7c:21:7d:da:85:20:5f:3c
Fingerprint (sha256): ec:36:37:89:6f:0c:d5:26:1b:72:52:38:35:58:c5:ce:80:3c:19:18:26:a6:db:e0:6c:72:63:26:81:40:a7:25

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.christchurchmetrocricket.org

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.christchurchmetrocricket.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.bayolympic.co.nz
www.blokarthb.co.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.burwoodafc.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.carltonjuniorsrugby.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.cmydt.co.nz
www.cornwallcricket.co.nz
www.darfieldcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.glenviewsoccer.co.nz
www.helensvillerugby.co.nz
www.hockeymanawatu.org.nz
www.howicknetball.org.nz
www.kapitisoftball.co.nz
www.katikatifc.co.nz
www.kaumatuatc.org.nz
www.kbhs.school.nz
www.mainlandfootball.co.nz
www.maristinvercargill.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.nelsonbaysfootball.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.otahuhusoccer.org.nz
www.otumoetaifootball.co.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.parklandsunitedsportsclub.net.nz
www.pauanuilifeguards.org.nz
www.pcbasketballclub.co.nz
www.phoenixsynchro.co.nz
www.rivertongolf.co.nz
www.royaloakbowls.co.nz
www.sasfootball.club
www.sasfootball.org.nz
www.slalomnz.org.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportcanterbury.org.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sporttasman.org.nz
www.sumnerbowls.co.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.ths.school.nz
www.unimountafc.org.nz
www.wakefieldfc.nz
www.westernafc.com
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name christchurchmetrocricket.org

(limited to 100 certificates)
amdg.org.nz
sporty.co.nz
squashauckland.org.nz
sporty.co.nz
www.membermanager.co.nz
www.pukekohesoftball.co.nz
www.eden.rugby
amdg.org.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.org
trfu.co.nz

Certificate

The complete raw certificate details for www.christchurchmetrocricket.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyIrWfcFw7fpjrNvtNPN
Bz0SZVU6Gtwyh/KiMrnAI6vG8H1GeO/O/t71aTCkX/HBfCeXtVcNLnC1PtfnF9ww
QWAzYBB2fXakx3I8yCtzYa1UEquQvMym9rLBt1V1swrTGVbVXbm8uICl12JKfLr1
j/P5KY3cBDpV+0CxNZTtJDIzq7O/YkDSDn4B6So7p6a5JFgBNxo0RGa2R+ISKOhY
3bSXtflO4zGFG26Ox5qlo1Api2gZ/UZUL6QiXrGDO70UbDc6wmXCuvwfQxkrjw/X
9sD9aQxKMipZ35Ai5tu6QQLwKEQlfBI1BAfUTSpNT8852mn1dveji4KL8Ykw91Oa
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273039444732104568762987627257446079707896
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 09:08:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 09:08:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.christchurchmetrocricket.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18068927140433544024511228077623645423800945670831832603781984590986306682060851242739175887003092988820438711104086487070091505055788882381349423190240147167662402254699848087641697907514150311151210353779857979973326916747485336880744981711246814480620111774461145558121291555921611472484752143812982136715186598458723068319173611960684316103842691756679761079199604525546914558178664491796080787364278985144156263341596261310931011361492931568900381651129778399075656958357090649130922595706012366800095920574608934631184883463638064296493217261163212596455508919277304036480138776763763586615133112814198378961567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16defefa2c72400553dc688188148ded4ae4a43d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2183 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016af8c3223a00000403004730450220751e48dcba80f2954747b08e5dd21f04388015d5747066b9f922313233d4d7a7022100cffc401520cdf6c88a91f82c8d07def4ca6a28ee3c8ba0a7675196d52f160eb900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016af8c3222d0000040300473045022073067d2d763e7aa43e3adba10ba26a898ed1545fea8f1f49fd57a4c19cdf5b0d022100a12627092635b6d2c9958a0de202d55ce2ffdd108c65d072e203d8f8bc827fd9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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