loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:63:16:2c:db:43:82:12:7b:ff:0a:7b:52:ff:18:41:1f:5d was issued on by Let's Encrypt.

With 79 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:63:16:2c:db:43:82:12:7b:ff:0a:7b:52:ff:18:41:1f:5d
Serial Number (int): 382166573976379183636658037048895585984349
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: f4:42:52:8e:9a:26:a4:fd:76:0a:6c:53:de:a3:ef:e6:68:82:db:5c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 47:2e:62:2c:13:9b:4e:26:10:ca:53:b0:1c:9a:d5:b9:cc:1f:39:3f
Fingerprint (sha256): ec:5d:4e:50:df:73:94:71:a9:d1:43:ef:9c:b7:93:a4:5b:25:b4:b1:d6:dc:08:05:2d:2f:d0:89:12:e0:3f:b5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

79

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
content.jucy.com
cp.nix.jucy.co.nz
ecotoursmilford.co.nz
ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
ecotoursmilford.co.nz.web1.nix.jucy.co.nz
ecotoursmilford.co.nz.web2.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucy.com.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucyrentals.de
jucyrentals.de.loadbalancer.nix.jucy.co.nz
jucyrentals.de.web1.nix.jucy.co.nz
jucyrentals.de.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.ecotoursmilford.co.nz
www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucy.com.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucyrentals.de
www.jucyrentals.de.loadbalancer.nix.jucy.co.nz
www.jucyrentals.de.web1.nix.jucy.co.nz
www.jucyrentals.de.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArQFC84NdBado/r/I659A
TJq8tbwxNv5zTcobTPvamh0HRbz5Px1fULTCFcLzuD25ZVTx5QHsUraHWMdqIiqC
PXKEidEoeIWLibK/tU1L88n632AY5ezC0G1CkCuoHsoDunEHg1o/TqG35o0pY3sr
XeMWm8bn6EcjFreCKZLCyNg++HJHv7OWOz2zfDMQ5aenAQxNWGOMhvJAx6SY/hPQ
ww9wlNscUI9yIsYz/2cGD70aqGH/ML8UMlHNbsfhcNZXipDRMdYVRJcCPPfd6ZaU
wqF/6+erSn3pLbt0SZxdJs+92gDDtIWh9Hb1RaeeTWazTP5YzjP/ozP8RmQJOCBH
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 382166573976379183636658037048895585984349
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-18 19:39:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-16 19:39:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21839848841876600021183161914712718543601038528530252779237903120599752407658767396915542266341245762251259694770732242347233269942952369353898038312600738743544228285058202100690697817623103288595916925252882528645240179351678499175585213404044459414135155294392689483675997616867697072977080746167281622118320677827402107247180699981782065593790559176780243535350180921977634110581880167579752393711349342603353376082924730766643208411751684458139532225069222176368815768068285572623460801844766519616451780518692594463600139127618756250926290842693923679389194629408324404930485840016013941144000224720829653468951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f442528e9a26a4fd760a6c53dea3efe66882db5c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2627 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyrentals.de.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyrentals.de.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016992883cf90000040300473045022100c5098a16f47503791069537f23e06bb8b233c85c0ed63b3fa59877ae0ddba26702205ea37b8b7a88ec66adf8958247f5fdaf15fb3864dbbdabed7cc5bb806c4405bc00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016992883edd00000403004830460221008be9385f77bf8129687a66c80de6c94772e04e96eac239049302992992afae5002210081e6f9cbda6924ff7b0ebd053282b4d5f7f3781cd1575a058dccbf6babd4f7c5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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