www.mttauharagymnastics.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:dc:7b:14:b4:da:99:94:7a:16:5d:53:36:a1:26:24:15:6f was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.mttauharagymnastics.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:dc:7b:14:b4:da:99:94:7a:16:5d:53:36:a1:26:24:15:6f
Serial Number (int): 336362581075458916040209385745911298397551
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d4:3e:bb:fe:36:11:66:37:0e:6d:f8:3b:46:19:89:9d:aa:31:77:9a
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:ef:bb:7a:a0:a9:6b:39:4d:be:26:f4:77:b2:ed:ca:17:40:85:bc
Fingerprint (sha256): f1:1d:95:01:17:e6:32:1c:c1:34:d6:08:2c:b3:b3:f2:f4:a4:55:f3:03:ad:5d:67:ea:7e:19:2c:74:97:83:4c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.mttauharagymnastics.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.mttauharagymnastics.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aafl.co.nz
www.actc.org.nz
www.acwpa.co.nz
www.ashleyrugby.co.nz
www.aucklandmarist.co.nz
www.badmintonhb.co.nz
www.basketballtaranaki.co.nz
www.belmontparkbowlingclub.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.boxingnz.org.nz
www.bushmultisport.org.nz
www.canamju.org
www.canoeslalombop.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.edenrugby.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastings-central.school.nz
www.hastingsintermediate.school.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.karakarugbyclub.co.nz
www.lucknow.school.nz
www.manurewarugby.co.nz
www.marchingcanterbury.co.nz
www.mariancollege.school.nz
www.maristfc.co.nz
www.maristnh.co.nz
www.marlboroughtennis.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.melrosetargetshooting.co.nz
www.mttauharagymnastics.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballkapiti.org.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.oacnz.org
www.ophc.co.nz
www.orfu.co.nz
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.seatounafc.org.nz
www.smognetball.org.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.stanthony.ac.nz
www.stheliersbowlingclub.co.nz
www.stjos.school.nz
www.stjosephschb.school.nz
www.suburbsrugby.co.nz
www.taierirugby.co.nz
www.taniwha.co.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.timarusquashclub.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.ultrarunner.org.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz
yes.stockx.co.nz

Other certificates including the domain name mttauharagymnastics.co.nz

(limited to 100 certificates)
willowpark.school.nz
www.diamondsportsnz.co.nz
meeanee.school.nz
www.taranakihockey.org.nz
www.canterburybaseball.co.nz
www.ophc.co.nz
southlandmtbclub.co.nz
www.opotikicol.school.nz
www.ophc.co.nz
distanceridingnewzealand.co.nz
www.rollestonrugby.co.nz
www.baseballnewzealand.org
canterburybaseball.co.nz
uniss.co.nz
rosmini.school.nz
canterburybaseball.co.nz
www.westcoastsoftball.co.nz
meeanee.school.nz
www.mttauharagymnastics.co.nz
mttauharagymnastics.co.nz
mtwswim.co.nz

Certificate

The complete raw certificate details for www.mttauharagymnastics.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAki/dUmCosZRAR1OIQPcV
6GZRqcEQeatfg7nmOVViCne3herwMoIW4E9mMc+ZBLn7wFQ5DJjXDGNsBPE9qNjp
HljCV7dMlPHAoRDj/0Nk3LVVE/nINsMAIAwO2r6WSkjF9uTi5yBSCdtUOGYAaFS3
bC73+gQ+5nTTJ6ECZhq1OgYI/H2tJtjbepF5DZqlIRgyiDrugDEOtd8MPLRd4zrn
Ix+RhJiHfgCOztsV5Y+QTfFHyIssHyu2DlEOSLWHaPCG0uEYFQZLrFZfJAv0UABj
FRva8qTXd4kbxyxYdv1C82qaJFlma52kZwOSp6buu0esjVoTEvGaluFCWg3v/2U9
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336362581075458916040209385745911298397551
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 08:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-16 08:16:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.mttauharagymnastics.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18454395408538285728278270930972424231773911565558244652631407199515120058894252254472933152372628770811041022496188891709686682749374125238081193245745403889208943495617357086270865276205882321377413886569727871196256223474308407758151173357754386176331657091338201735087523831075217499682525369775040069645111192610191898161412490944138597921609006816741407813977425931463950678749449894759315895254982197432147237220846426393016115316250803608422399611778109817089011015023360846375981264899367185599172661359569385716639594782865032459827402784362821549766400910264188606801727486549295230847475178059274935156033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d43ebbfe361166370e6df83b4619899daa31779a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2235 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boxingnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastingsintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristnh.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mttauharagymnastics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballkapiti.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ophc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.orfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smognetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stanthony.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taniwha.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016d3e81dd4a00000403004830460221009599f5a201d7c69225a234501da6ae488725a12826f6483e7bffa79040408b80022100b0b2be8fc5a3f6fbf8a4f2f3e664a49745ca81fb9abd1ebfa7075d4ddad1b5fe007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016d3e81dbdd000004030047304502202094ed1e8ae45fcbdc8a69ccabca51123e3cbf685858085bba91522a395b4198022100c838a4708e3f945f848c186f1441e41f1dfbfac317d34ce6c7afbccca8355c46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00026e335c4317b9df6151cf087e7537266a515f60fa2d6eda7f7d68d8763a3957c50053c110fb4c505165dd7b04a190eb2d2a8ae377c432013bf4f6d2b46ffea1957221498a5841af4e099970e9fb8d2b813bb45036e6ae0696569c6161bf7ef258c6be0eb9dbb1471b6aff10226291d041cb610ddbd93ca0b4aad27a836cfd052a64f34a9a0fe8c75e75ffd1c5175dab44f838e4cae5c6d2a79a87e26eb071e4807ffd1dc2a4f8bba07a899f9b5221e85952d20319de87d8803b9c09c59af6b5e9fb4adaf1b597a82b62e720e6761712d82b0c194c2468fbfac23ed4d34755262c9dd0c921fdc68e6c765d51c5d3acdd0c164126e115918d4e494be047db9d1f