www.westcoastsoftball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:eb:b2:2e:e6:65:5b:4a:ee:b7:84:5e:5e:bd:7c:87:4d was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.westcoastsoftball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:eb:b2:2e:e6:65:5b:4a:ee:b7:84:5e:5e:bd:7c:87:4d
Serial Number (int): 271178057828161978844654307154548232062797
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:69:42:86:59:e7:bb:27:f7:0b:12:9f:03:20:d0:5f:59:89:58:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0a:c2:04:dc:de:74:4f:61:44:52:6b:d1:b1:71:84:23:56:09:8e:65
Fingerprint (sha256): ee:90:ca:38:01:6f:f5:92:59:d9:24:46:0f:0a:01:f9:7c:e9:02:58:35:53:07:86:da:bb:15:f4:85:2c:88:15

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.westcoastsoftball.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.westcoastsoftball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ashleyrugby.co.nz
www.avondaleint.school.nz
www.badmintonhb.co.nz
www.belmontparkbowlingclub.co.nz
www.bowlsdunedin.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.c33sports.kiwi
www.cambridgenetball.org.nz
www.canamju.org
www.canterburybaseball.co.nz
www.canterburycommunityrugby.co.nz
www.canterburyrugby.co.nz
www.clevedoncricketclub.co.nz
www.countiesbadminton.co.nz
www.crfu.co.nz
www.cyclingtimaru.com
www.dairyflattennis.co.nz
www.distanceridingnewzealand.co.nz
www.edenrugby.co.nz
www.ellesmererugby.org.nz
www.forcepass.co.nz
www.ghryc.co.nz
www.gisborneharriers.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastingsintermediate.school.nz
www.karakarugbyclub.co.nz
www.lnissn.org.nz
www.lynnavon.org.nz
www.mahedrysdale.co.nz
www.mahedrysdale.com
www.manukaumasters.co.nz
www.manurewarugby.co.nz
www.maorirugby.co.nz
www.marewa.school.nz
www.mariancollege.school.nz
www.maristalbionnetball.co.nz
www.maristfc.co.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.meeanee.school.nz
www.midcanterburyrugby.co.nz
www.mttauharagymnastics.co.nz
www.myhockey.co.nz
www.mysoftball.co.nz
www.ncnc.org.nz
www.netballkapiti.org.nz
www.netballmanurewa.org.nz
www.netballtaranaki.org.nz
www.nzteachersgames.co.nz
www.ophc.co.nz
www.opotikicol.school.nz
www.orfu.co.nz
www.orokohangamusictrust.co.nz
www.otagoindoorbowls.co.nz
www.papakurarugby.co.nz
www.photosnap.co.nz
www.pickleball.org.nz
www.poolburn.school.nz
www.ppnc.co.nz
www.rangi.school.nz
www.rollestonrugby.co.nz
www.rosmini.school.nz
www.safepass.co.nz
www.smognetball.org.nz
www.southbridgerugby.com
www.southlandmtbclub.co.nz
www.southlandtriclub.co.nz
www.sportsouthland.co.nz
www.stanthony.ac.nz
www.stjos.school.nz
www.suburbsrugby.co.nz
www.taniwha.co.nz
www.taranakihockey.org.nz
www.tasmanrugbyreferees.co.nz
www.technicalharriers.co.nz
www.timarusquashclub.co.nz
www.touchcanterbury.co.nz
www.uniss.co.nz
www.valleyhockey.org.nz
www.westaucklandafc.co.nz
www.westcoastsoftball.co.nz
www.whangamatasurf.co.nz
www.willowpark.school.nz
yes.stockx.co.nz

Other certificates including the domain name westcoastsoftball.co.nz

(limited to 100 certificates)
supersixes.co.nz
www.diamondsportsnz.co.nz
bowlsdunedin.co.nz
eden.rugby
www.bowlswestcoast.org.nz
hbcricket.co.nz
maristrugby.org.nz
www.ophc.co.nz
hbnetball.co.nz
www.turbotouch.org.nz
www.manurewamets.co.nz
ctfc.co.nz
turbotouch.co.nz
www.baseballnewzealand.org
eden.rugby
www.schoolground.nz
sked.co.nz
www.waihibeachtennisclub.co.nz
www.diamondsportnz.co.nz
www.westcoastsoftball.co.nz

Certificate

The complete raw certificate details for www.westcoastsoftball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOGzCCDQOgAwIBAgISAxzrsi7mZVtK7reEXl69fIdNMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjQyMTM4MDBaFw0x
OTA0MjQyMTM4MDBaMCYxJDAiBgNVBAMTG3d3dy53ZXN0Y29hc3Rzb2Z0YmFsbC5j
by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMB4lFkGs0c6EVVN
JlU7F8Y5IC7DYJyU6Wo6Sbq3jJYsgr4WHn1IEQP9Uqq6jezWc8qNt/5dn51drtOS
yAYxQL40bMYOjskMe5Y8w+AkLbMog2oZ+j1mrrbGDFu1HKkdQwqZ+A+86vBuL4Vb
pgI/FTTp3kpIhedAVOKFcXXBVOQmXNrCbemw7Reny3LIFGRO6wm8VJ5x1VWb9A+h
C3HoCp9nBtG/XISE79vM3r8sHc+pWAZR+QmDe6fr7f+QWk/PX9WqJDjLFnw+BBIc
1glE/cWvHb9QvvS2/SsJLy4hqqYjYwNbUqrO5KR/hmoM7PbnRVmAQ9cwKPIG3EmD
ALI2YDsCAwEAAaOCCx0wggsZMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUGmlChlnn
uyf3CxKfAyDQX1mJWO0wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCNAGA1UdEQSCCMcwggjDghV3d3cuYXNobGV5cnVn
YnkuY28ubnqCGXd3dy5hdm9uZGFsZWludC5zY2hvb2wubnqCFXd3dy5iYWRtaW50
b25oYi5jby5ueoIgd3d3LmJlbG1vbnRwYXJrYm93bGluZ2NsdWIuY28ubnqCFnd3
dy5ib3dsc2R1bmVkaW4uY28ubnqCGHd3dy5ib3dsc3dhbmdhbnVpLm9yZy5ueoIT
d3d3LmJveGluZ256Lm9yZy5ueoISd3d3LmMzM3Nwb3J0cy5raXdpght3d3cuY2Ft
YnJpZGdlbmV0YmFsbC5vcmcubnqCD3d3dy5jYW5hbWp1Lm9yZ4Icd3d3LmNhbnRl
cmJ1cnliYXNlYmFsbC5jby5ueoIid3d3LmNhbnRlcmJ1cnljb21tdW5pdHlydWdi
eS5jby5ueoIZd3d3LmNhbnRlcmJ1cnlydWdieS5jby5ueoIdd3d3LmNsZXZlZG9u
Y3JpY2tldGNsdWIuY28ubnqCG3d3dy5jb3VudGllc2JhZG1pbnRvbi5jby5ueoIO
d3d3LmNyZnUuY28ubnqCFXd3dy5jeWNsaW5ndGltYXJ1LmNvbYIZd3d3LmRhaXJ5
ZmxhdHRlbm5pcy5jby5ueoIid3d3LmRpc3RhbmNlcmlkaW5nbmV3emVhbGFuZC5j
by5ueoITd3d3LmVkZW5ydWdieS5jby5ueoIZd3d3LmVsbGVzbWVyZXJ1Z2J5Lm9y
Zy5ueoITd3d3LmZvcmNlcGFzcy5jby5ueoIPd3d3LmdocnljLmNvLm56ghp3d3cu
Z2lzYm9ybmVoYXJyaWVycy5jby5ueoIYd3d3LmdyYW1tYXJjYXJsdG9uLmNvLm56
ghR3d3cuZ3JhbW1hcnRlYy5jby5ueoIZd3d3LmhhbHN3ZWxsY3JpY2tldC5jby5u
eoIid3d3Lmhhc3RpbmdzaW50ZXJtZWRpYXRlLnNjaG9vbC5ueoIZd3d3LmthcmFr
YXJ1Z2J5Y2x1Yi5jby5ueoIRd3d3LmxuaXNzbi5vcmcubnqCE3d3dy5seW5uYXZv
bi5vcmcubnqCFnd3dy5tYWhlZHJ5c2RhbGUuY28ubnqCFHd3dy5tYWhlZHJ5c2Rh
bGUuY29tghh3d3cubWFudWthdW1hc3RlcnMuY28ubnqCF3d3dy5tYW51cmV3YXJ1
Z2J5LmNvLm56ghR3d3cubWFvcmlydWdieS5jby5ueoIUd3d3Lm1hcmV3YS5zY2hv
b2wubnqCG3d3dy5tYXJpYW5jb2xsZWdlLnNjaG9vbC5ueoIdd3d3Lm1hcmlzdGFs
Ymlvbm5ldGJhbGwuY28ubnqCEnd3dy5tYXJpc3RmYy5jby5ueoISd3d3Lm1hcmlz
dG5oLmNvLm56ght3d3cubWFybGJvcm91Z2h0ZW5uaXMuY28ubnqCHXd3dy5tYXJ0
aW5ib3JvdWdoc3F1YXNoLmNvLm56giF3d3cubWFydGluYm9yb3VnaHRlbm5pc2Ns
dWIuY28ubnqCEnd3dy5tY2hvY2tleS5jby5ueoIVd3d3Lm1lZWFuZWUuc2Nob29s
Lm56ghx3d3cubWlkY2FudGVyYnVyeXJ1Z2J5LmNvLm56gh13d3cubXR0YXVoYXJh
Z3ltbmFzdGljcy5jby5ueoISd3d3Lm15aG9ja2V5LmNvLm56ghR3d3cubXlzb2Z0
YmFsbC5jby5ueoIPd3d3Lm5jbmMub3JnLm56ghh3d3cubmV0YmFsbGthcGl0aS5v
cmcubnqCGnd3dy5uZXRiYWxsbWFudXJld2Eub3JnLm56ghp3d3cubmV0YmFsbHRh
cmFuYWtpLm9yZy5ueoIZd3d3Lm56dGVhY2hlcnNnYW1lcy5jby5ueoIOd3d3Lm9w
aGMuY28ubnqCGHd3dy5vcG90aWtpY29sLnNjaG9vbC5ueoIOd3d3Lm9yZnUuY28u
bnqCHnd3dy5vcm9rb2hhbmdhbXVzaWN0cnVzdC5jby5ueoIad3d3Lm90YWdvaW5k
b29yYm93bHMuY28ubnqCF3d3dy5wYXBha3VyYXJ1Z2J5LmNvLm56ghN3d3cucGhv
dG9zbmFwLmNvLm56ghV3d3cucGlja2xlYmFsbC5vcmcubnqCFnd3dy5wb29sYnVy
bi5zY2hvb2wubnqCDnd3dy5wcG5jLmNvLm56ghN3d3cucmFuZ2kuc2Nob29sLm56
ghh3d3cucm9sbGVzdG9ucnVnYnkuY28ubnqCFXd3dy5yb3NtaW5pLnNjaG9vbC5u
eoISd3d3LnNhZmVwYXNzLmNvLm56ghZ3d3cuc21vZ25ldGJhbGwub3JnLm56ghh3
d3cuc291dGhicmlkZ2VydWdieS5jb22CGnd3dy5zb3V0aGxhbmRtdGJjbHViLmNv
Lm56ghp3d3cuc291dGhsYW5kdHJpY2x1Yi5jby5ueoIYd3d3LnNwb3J0c291dGhs
YW5kLmNvLm56ghN3d3cuc3RhbnRob255LmFjLm56ghN3d3cuc3Rqb3Muc2Nob29s
Lm56ghZ3d3cuc3VidXJic3J1Z2J5LmNvLm56ghF3d3cudGFuaXdoYS5jby5ueoIZ
d3d3LnRhcmFuYWtpaG9ja2V5Lm9yZy5ueoIdd3d3LnRhc21hbnJ1Z2J5cmVmZXJl
ZXMuY28ubnqCG3d3dy50ZWNobmljYWxoYXJyaWVycy5jby5ueoIad3d3LnRpbWFy
dXNxdWFzaGNsdWIuY28ubnqCGXd3dy50b3VjaGNhbnRlcmJ1cnkuY28ubnqCD3d3
dy51bmlzcy5jby5ueoIXd3d3LnZhbGxleWhvY2tleS5vcmcubnqCGXd3dy53ZXN0
YXVja2xhbmRhZmMuY28ubnqCG3d3dy53ZXN0Y29hc3Rzb2Z0YmFsbC5jby5ueoIY
d3d3LndoYW5nYW1hdGFzdXJmLmNvLm56ghh3d3cud2lsbG93cGFyay5zY2hvb2wu
bnqCEHllcy5zdG9ja3guY28ubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4
eHAlCBcvo6odBxPTDAAAAWiCA0vmAAAEAwBHMEUCIQC4iG61ksLP0ARGMqWkmRjY
5LYwPG/9jtiPJUAVToQs1QIgCPe/7m33jL0xOOic1259HArhfgI3C0HSAXcO+Y6k
IpcAdwApPFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWiCA0peAAAE
AwBIMEYCIQCRSHi4/RjkXfQLkZLK/hWNOW0ZO/zaQCiPnnc67P0N4AIhALuuhsK5
oVL/7WJPdOTe98d75qAvzHDQpsS4lTLxg5GHMA0GCSqGSIb3DQEBCwUAA4IBAQAl
MOkEBXz/Toho0mo9qHyDH6h3Eb1/6VJPnmZsNBpTHpFOD6enrWYmabxdqtag5Egq
nNaipFkDDmg3z0LarN1lzC0wWp5p0fxjT5n+i30D8mv12d6ktJT4MApOGOa241gf
dkcxOABWOl6iXmZ4mq2iIH9FevFWd+uWj5b47lSd+UE5mwx9N2EuuGljwhYmoHo0
9YmuxH6nlwnnGITOe92JBDaZ8+l8xPdwOdqlArLXI74srnoyqt3B23msT5tiiaiI
9HUH2vZb3byUjPSpqRt6tSXzQassL6IOJiUKpDX9EIZ1uZTiYWtSw3zuREPO8rKg
BRXN0OHuB6rfipkIzhzm
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHiUWQazRzoRVU0mVTsX
xjkgLsNgnJTpajpJureMliyCvhYefUgRA/1SqrqN7NZzyo23/l2fnV2u05LIBjFA
vjRsxg6OyQx7ljzD4CQtsyiDahn6PWautsYMW7UcqR1DCpn4D7zq8G4vhVumAj8V
NOneSkiF50BU4oVxdcFU5CZc2sJt6bDtF6fLcsgUZE7rCbxUnnHVVZv0D6ELcegK
n2cG0b9chITv28zevywdz6lYBlH5CYN7p+vt/5BaT89f1aokOMsWfD4EEhzWCUT9
xa8dv1C+9Lb9KwkvLiGqpiNjA1tSqs7kpH+Gagzs9udFWYBD1zAo8gbcSYMAsjZg
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271178057828161978844654307154548232062797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 21:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 21:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.westcoastsoftball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24297214512866410224214518425495187784126882157973784296429998638889238716771942583790785019877822923076617103527212010547119832748110826580357956356331083962495218017017701099902085285445778142211634452722244051981048512657762268160084652722909114368172849136840630967378209163404852183954429288861572368237979176926398197870718729602820234614111965761129055119032397823793016752033193942837661715585768283318765749588037565116455082111532118651695349495671408099910224912970237750022944563285314458732440570936427480029652240975853153976856698976899459133169205698794876402127606500779494610578353660824132724875323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a69428659e7bb27f70b129f0320d05f598958ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avondaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.c33sports.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgenetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburybaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburycommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingtimaru.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distanceridingnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellesmererugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forcepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lnissn.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mahedrysdale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manukaumasters.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maorirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marewa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbionnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meeanee.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.midcanterburyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myhockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballtaranaki.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orokohangamusictrust.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagoindoorbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photosnap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pickleball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ppnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rollestonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safepass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southbridgerugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandmtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandtriclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taranakihockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uniss.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westcoastsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.willowpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016882034be60000040300473045022100b8886eb592c2cfd0044632a5a49918d8e4b6303c6ffd8ed88f2540154e842cd5022008f7bfee6df78cbd3138e89cd76e7d1c0ae17e02370b41d201770ef98ea42297007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016882034a5e0000040300483046022100914878b8fd18e45df40b9192cafe158d396d193bfcda40288f9e773aecfd0de0022100bbae86c2b9a152ffed624f74e4def7c77be6a02fcc70d0a6c4b89532f1839187
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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