www.greenhithefootball.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b8:6c:a3:92:6d:e2:49:04:6f:9d:4a:53:25:11:d3:5b:09 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.greenhithefootball.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b8:6c:a3:92:6d:e2:49:04:6f:9d:4a:53:25:11:d3:5b:09
Serial Number (int): 324093219246603833040261226942403060128521
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:29:4d:ab:40:a9:77:6c:56:3e:db:63:03:ca:2e:48:5c:f4:ae:ed
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): fb:4b:cd:ce:bb:ce:9f:a8:84:ad:eb:b1:c5:81:69:b7:97:a0:aa:bc
Fingerprint (sha256): ef:d9:c5:b6:2d:15:a2:06:21:f7:43:d5:6d:3a:31:f7:7b:29:0c:4e:94:2f:e6:41:de:7e:2b:52:d4:61:db:5e

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.greenhithefootball.org

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.greenhithefootball.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.ardmoremarist.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.baseballnz.com
www.bbafc.org.nz
www.bowlssouthland.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.capitalfootball.org.nz
www.centralfootball.co.nz
www.centralfootball.org.nz
www.clevedontennisclub.co.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.developyourlegacy.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.footballsouth.co.nz
www.gameoftwohalfwits.com
www.glenfieldbowls.co.nz
www.greenhithefootball.org
www.hbcc.org.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hrc.org.nz
www.karakasportspark.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonnetball.co.nz
www.newplymouthcroquetclub.co.nz
www.newzealandbaseball.co.nz
www.nff.org.nz
www.nhbmx.org.nz
www.nzsra.org.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.ravensbourne.co.nz
www.redbeachsquashclub.co.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.schoolground.co.nz
www.schoolground.nz
www.scpacers.co.nz
www.southcanterburybasketball.co.nz
www.southlandbmxclub.co.nz
www.sportsground.co.nz
www.sportsportal.co.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.takapunaafc.co.nz
www.tcafc.co.nz
www.teeball.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waibopfootball.co.nz
www.waihekeunited.org.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.waitematarowing.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name greenhithefootball.org

(limited to 100 certificates)
maristinvercargill.co.nz
sporty.co.nz
static.greenhithefootball.org
sporty.co.nz
forms.greenhithefootball.org
forms.welovehardhouse.com
forms.greenhithefootball.org
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
sporty.co.nz
sportnorthland.co.nz
www.katikatifc.co.nz
sporty.co.nz
forms.thepersonalisedgiftshop.com.au
onlinequote.cascadiascreenprinting.com
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
forms.greenhithefootball.org
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.pkjsports.co.nz
forms.greenhithefootball.org
forms.securesign24x7.com
forms.welovehardhouse.com
greenhithefootball.org
sporty.co.nz
hockeymanawatu.org.nz
forms.thepersonalisedgiftshop.com.au
www.nzfootball.co.nz
forms.greenhithefootball.org
forms.greenhithefootball.org
hockeymanawatu.org.nz
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
sporty.co.nz
www.sportsground.com
maristinvercargill.co.nz
hockeymanawatu.org.nz
forms.greenhithefootball.org
forms.thepersonalisedgiftshop.com.au
maristinvercargill.co.nz
forms.thepersonalisedgiftshop.com.au
forms.welovehardhouse.com
www.aucklandsoftball.org.nz
forms.thepersonalisedgiftshop.com.au
forms.divorcethesmartway.ca
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
forms.thepersonalisedgiftshop.com.au
forms.greenhithefootball.org
forms.greenhithefootball.org
forms.wifigarden.com
accountverification.supporthelpdesk.host
forms.greenhithefootball.org
forms.thepersonalisedgiftshop.com.au
justescapetravel.com
maristinvercargill.co.nz
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
forms.greenhithefootball.org
maristalbion.co.nz
forms.greenhithefootball.org
www.mooloocommunityrugby.co.nz
forms.thepersonalisedgiftshop.com.au
sporty.co.nz
forms.thepersonalisedgiftshop.com.au
www.unimountafc.org.nz
forms.thepersonalisedgiftshop.com.au
forms.welovehardhouse.com
greenhithefootball.org
forms.thepersonalisedgiftshop.com.au
forms.thepersonalisedgiftshop.com.au
www.greenhithefootball.org
forms.thepersonalisedgiftshop.com.au
forms.greenhithefootball.org
contact.zenbros.net
talenthive.talencity.com
sporty.co.nz
www.pauanuilifeguards.org.nz
forms.thepersonalisedgiftshop.com.au

Certificate

The complete raw certificate details for www.greenhithefootball.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2VCXznlY7h4+xUxVsIou
oGCxHcPw3/IitU1a7z6vqVXhsoUgoCb1qse9/vfsXPz/CDKIBBkkUz3Wasg7hpud
7OLaee9oVn0XESh7n7Bkyj7FzvV7weh9ojRxTfK/h/fLwAVNoPmNNW+JMLBdL19E
r8PtEN3Ui+d8KZz0hOBrx4ZqliIe6w+EZuA9eZwPjB1PzoW3hfR5zf0ZvQ7F+5aa
xt4aoUSHkhF1KYUr1BqumWYtJP5j9cCZSrFh7B6e+9BeeqTQHnU+Yn/bg6ztDgh/
uS1icmTMdLfVUKDqWfN0W6Rp7alVmxpCTlBA601s4pSPuLAJ/vfbRoNcxy8X1j+M
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324093219246603833040261226942403060128521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-27 10:59:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-25 10:59:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.greenhithefootball.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27433454064321204973780448847336684133930238315628541225929461104951647284693679471620893966376432071922228890030884225082549753379490995714781963095482011223827603903155215143148307551530633372095074001828965089908516752460148565666293509692173183656953617504769989617408137593621542252565543666790747364454549375886080046025479032791012669359919259119936424392451218554157970848383193065354178341057611347170383386602245509967176446703751186112533034310903250918748503782306802481899928923377774683327148567647686182880037645830806265298244163274622261211234622788039796422995991357130049047849872621587247329676347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c294dab40a9776c563edb6303ca2e485cf4aeed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2299 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlssouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redbeachsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpacers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tcafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waibopfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016af928a1d90000040300483046022100dcdbd4b531a9c3fa85bb4e37b06690b1b6651924d5443f2e26d5bbd3c4da788c022100d0b5840a9f249207a77a9272dc1bd64f64b3c5271c76ceb54bf2769da824a92e007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016af928a1a60000040300473045022010354d642ca86328853cbb5f3747f8bf54cd859f908ba12fdb611444c6805478022100e0b1f4bbc4d8a6b8481ab97fe14d8af73e8776564231bb90e530a41d6d59b393
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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