www.marlinsnetball.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a3:84:54:53:aa:50:a8:2f:57:af:36:36:bd:62:24:bf:61 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.marlinsnetball.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a3:84:54:53:aa:50:a8:2f:57:af:36:36:bd:62:24:bf:61
Serial Number (int): 316978779548707182159551560822426985348961
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e6:b3:d4:d3:a3:d0:c6:12:91:69:b6:a6:70:78:36:50:6d:8d:45:ee
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bb:47:9d:10:6e:ab:93:25:61:83:2d:f0:f8:12:4f:b9:a3:30:bc:c7
Fingerprint (sha256): ee:e5:ef:26:d4:49:a4:7c:da:64:46:79:a2:0c:0b:ef:f9:58:79:8d:7c:41:31:92:1d:aa:a9:2d:20:e9:fb:d4

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.marlinsnetball.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.marlinsnetball.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.akaranacityrifleclub.co.nz
www.aoraki-dragons.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.badminton.org.nz
www.bayofislandsdressagegroup.co.nz
www.blokarthb.co.nz
www.bopbadminton.co.nz
www.bowlsbop.co.nz
www.bowlsomanu.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.canterburyunited.co.nz
www.capitalbaseball.co.nz
www.carltonjuniorsrugby.co.nz
www.christchurchmetrocricket.co.nz
www.christchurchmetrocricket.com
www.christchurchmetrocricket.org.nz
www.cliftoncricket.nz
www.cliftoncricketclub.co.nz
www.clubsnzdarts.co.nz
www.cmydt.co.nz
www.collegesportsportal.co.nz
www.darfieldcricket.co.nz
www.fastpitch.co.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.glenviewsoccer.co.nz
www.hbbusinesshub.nz
www.hbreds.nz
www.healthyfamiliesinvercargill.org.nz
www.helensvillerugby.co.nz
www.highlightcam.co.nz
www.hnwafc.org.nz
www.hockeymanawatu.org.nz
www.hockeywairarapa.org.nz
www.howicknetball.org.nz
www.hsobburnside.co.nz
www.kapitisoftball.co.nz
www.kaumatuatc.org.nz
www.kbhs.school.nz
www.kerikerimtbclub.co.nz
www.maristinvercargill.co.nz
www.marlinsnetball.co.nz
www.mcobsquash.co.nz
www.mooloo.co.nz
www.mooloocommunityrugby.co.nz
www.moonshinetrail.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nsu.org.nz
www.otahuhusoccer.org.nz
www.otumoetaifootball.co.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.parklandsunited.co.nz
www.parklandsunitedsportsclub.net.nz
www.pauanuilifeguards.org.nz
www.phoenixsynchro.co.nz
www.playsoftball.org.nz
www.prebbletonfootball.co.nz
www.pukekohesoftball.co.nz
www.royaloakbowls.co.nz
www.sailhbc.org.nz
www.sasfootball.club
www.sasfootball.org.nz
www.sharkssports.co.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sumnerbowls.co.nz
www.sydenhamrugby.co.nz
www.taradalefootball.org.nz
www.thesalmonrun.nz
www.ths.school.nz
www.trfu.co.nz
www.unimountafc.org.nz
www.wahinetoamcc.nz
www.westlandmotorcycleclub.co.nz
www.worldpowerlifting.nz
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name marlinsnetball.co.nz

(limited to 100 certificates)
www.sportsground.com
belmontparkbowlingclub.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
squashauckland.org.nz
www.sportsground.com
sporty.co.nz
sporty.co.nz
www.cyclingsc.co.nz
www.marlboroughtrampingclub.co.nz
sporty.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.crossrecreationcentre.co.nz
www.marlinsnetball.co.nz
www.cfc.co.nz
trfu.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.marlinsnetball.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxkPPegNmzKvs++Pses7
ZTqiSc/TGe1VZWQYDBpbjk4Ajhnj8GoBYKtO6/onQE8X2176xNCZFeX/REFPiDqe
CdxEopiJNBCznXGk8lix976mNEG9V2vJdKlYVuzu1lmnAHzuFkvTcKOS+DWWdS05
OWZfqxtgkJasVGcPPsEz0bdrmrS8ax26/+/qlclgsisoeXq1jY6lT2vXERHO0QAd
C3nAsphNBZwuaqAYaIo6C02gx1m1SUE03JC0gML7UBx0fhHusJ8U6/Jfd0At+Lac
mFFygNbtpRiA36lFZiVP12iDyB0XgMrXdQU+NJXgYL6dlfG9B+zt9VyvqQkLrD4C
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 316978779548707182159551560822426985348961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 23:03:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 23:03:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.marlinsnetball.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24628826787314068071504243215256551707753660171937109025802962352395667425321721330112145968172546344383118077464233936300843083952077092338493124579700108166957714294579057421092741278045193859602583370918169332553528804496444279853090246819885640548024412083277574036614254844495256012019091733186186943349548028015806802601285146508394650373357534468387416530819426962468162369098353271597621775144035800216141436053123303163195921361091829420848700301617233884592551132632727047272566867679510817865013239107213491229639195969208102970151726900691226658319045433090353893181015966734921588603927614172563165283023
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e6b3d4d3a3d0c6129169b6a6707836506d8d45ee
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegesportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunitedsportsclub.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016d3c87ec0a000004030047304502203a2e2f4b031d856d20b10dedb15a03f97747d536820d819e75776d94f27e9af7022100e21f49c9f6ee2af3dd8310e756eff7426456aaf756094a5553ef29464946c23c007700293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3c87ec270000040300483046022100c61890fcbc25b4a0ed339d722b6817ae68b57701950a6842dc1168fe5592f71b022100ef10ba07625273f39311c8e543caf8c42cef8ab08449b97e4addc1716a181986
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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