loadbalancer.nix.jucy.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:8b:c2:31:50:9a:93:02:1d:aa:71:4b:db:b3:b6:ed:75:63 was issued on by Let's Encrypt.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=loadbalancer.nix.jucy.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:8b:c2:31:50:9a:93:02:1d:aa:71:4b:db:b3:b6:ed:75:63
Serial Number (int): 308894233085858930420896362720239838655843
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 24:0a:22:40:eb:32:54:d9:04:27:07:67:82:3c:60:dd:db:e3:8a:97
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 19:bb:69:c5:0a:7b:80:16:02:4b:3f:32:ad:3d:cd:c2:fe:09:88:88
Fingerprint (sha256): f3:2b:51:25:1f:67:8d:59:87:2b:b2:10:53:ab:6b:b8:7e:c5:cb:45:d2:d1:e6:a2:42:08:55:4e:7d:93:56:ff

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate loadbalancer.nix.jucy.co.nz

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for loadbalancer.nix.jucy.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.jucyworld.com
beta.jucy.com
beta.jucy.com.loadbalancer.nix.jucy.co.nz
beta.jucy.com.web1.nix.jucy.co.nz
beta.jucy.com.web2.nix.jucy.co.nz
content.jucy.com
cp.nix.jucy.co.nz
ecotoursmilford.co.nz
ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
ecotoursmilford.co.nz.web1.nix.jucy.co.nz
ecotoursmilford.co.nz.web2.nix.jucy.co.nz
jucy.co.nz
jucy.co.nz.loadbalancer.nix.jucy.co.nz
jucy.co.nz.web1.nix.jucy.co.nz
jucy.co.nz.web2.nix.jucy.co.nz
jucy.com
jucy.com.au
jucy.com.au.loadbalancer.nix.jucy.co.nz
jucy.com.au.web1.nix.jucy.co.nz
jucy.com.au.web2.nix.jucy.co.nz
jucy.com.loadbalancer.nix.jucy.co.nz
jucy.com.web1.nix.jucy.co.nz
jucy.com.web2.nix.jucy.co.nz
jucycruise.co.nz
jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
jucycruise.co.nz.web1.nix.jucy.co.nz
jucycruise.co.nz.web2.nix.jucy.co.nz
jucysnooze.co.nz
jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
jucysnooze.co.nz.web1.nix.jucy.co.nz
jucysnooze.co.nz.web2.nix.jucy.co.nz
jucyusa.com
jucyusa.com.loadbalancer.nix.jucy.co.nz
jucyusa.com.web1.nix.jucy.co.nz
jucyusa.com.web2.nix.jucy.co.nz
jucyworld.com
jucyworld.com.loadbalancer.nix.jucy.co.nz
jucyworld.com.web1.nix.jucy.co.nz
jucyworld.com.web2.nix.jucy.co.nz
loadbalancer.nix.jucy.co.nz
operations.jucy.co.nz
web1.nix.jucy.co.nz
web2.nix.jucy.co.nz
www.ecotoursmilford.co.nz
www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz
www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz
www.jucy.co.nz
www.jucy.co.nz.loadbalancer.nix.jucy.co.nz
www.jucy.co.nz.web1.nix.jucy.co.nz
www.jucy.co.nz.web2.nix.jucy.co.nz
www.jucy.com
www.jucy.com.au
www.jucy.com.au.loadbalancer.nix.jucy.co.nz
www.jucy.com.au.web1.nix.jucy.co.nz
www.jucy.com.au.web2.nix.jucy.co.nz
www.jucy.com.loadbalancer.nix.jucy.co.nz
www.jucy.com.web1.nix.jucy.co.nz
www.jucy.com.web2.nix.jucy.co.nz
www.jucycruise.co.nz
www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz
www.jucycruise.co.nz.web1.nix.jucy.co.nz
www.jucycruise.co.nz.web2.nix.jucy.co.nz
www.jucysnooze.co.nz
www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz
www.jucysnooze.co.nz.web1.nix.jucy.co.nz
www.jucysnooze.co.nz.web2.nix.jucy.co.nz
www.jucyusa.com
www.jucyusa.com.loadbalancer.nix.jucy.co.nz
www.jucyusa.com.web1.nix.jucy.co.nz
www.jucyusa.com.web2.nix.jucy.co.nz
www.jucyworld.com
www.jucyworld.com.loadbalancer.nix.jucy.co.nz
www.jucyworld.com.web1.nix.jucy.co.nz
www.jucyworld.com.web2.nix.jucy.co.nz

Other certificates including the domain name jucy.co.nz

(limited to 100 certificates)

Certificate

The complete raw certificate details for loadbalancer.nix.jucy.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO/zCCDeegAwIBAgISA4vCMVCakwIdqnFL27O27XVjMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTEyMjMxMzA0MjdaFw0y
MDAzMjIxMzA0MjdaMCYxJDAiBgNVBAMTG2xvYWRiYWxhbmNlci5uaXguanVjeS5j
by5uejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHu0qConA7apjkV
bIC9N9cIx5HkYSTt9ksPl+n2mHsH5OCqNhWJxgUn/KJmYtgmGz02vVpP5Lat7mhw
JOfqucsRSWS2+znxVVigT0aym/O8jxqaS0pCYztB+E5Ir0sOknMvzmoZpJ5JQFQw
WdxjFLdyxH1Z8SLsSJEPq8lYyMu5PJBwq4DVSzM1HRP5mUIcbcssHPY/10zuXWnN
Oy0gzLHAYWLM8LvhFuTiff/ZI6rW+Z0Pv1s/ysH9gExNTu3dVHWTPv/vMK4/HlsK
mbFklDBaJZn7MrZvXYIIgV2Rt9gprHNlSIstuddfhZss78emIRmDWPr5FExIc8Q9
DcLQI+sCAwEAAaOCDAEwggv9MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUJAoiQOsy
VNkEJwdngjxg3dvjipcwHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEw
bwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMu
bGV0c2VuY3J5cHQub3JnLzCCCbQGA1UdEQSCCaswggmnghJhdXRoLmp1Y3l3b3Js
ZC5jb22CDWJldGEuanVjeS5jb22CKWJldGEuanVjeS5jb20ubG9hZGJhbGFuY2Vy
Lm5peC5qdWN5LmNvLm56giFiZXRhLmp1Y3kuY29tLndlYjEubml4Lmp1Y3kuY28u
bnqCIWJldGEuanVjeS5jb20ud2ViMi5uaXguanVjeS5jby5ueoIQY29udGVudC5q
dWN5LmNvbYIRY3Aubml4Lmp1Y3kuY28ubnqCFWVjb3RvdXJzbWlsZm9yZC5jby5u
eoIxZWNvdG91cnNtaWxmb3JkLmNvLm56LmxvYWRiYWxhbmNlci5uaXguanVjeS5j
by5ueoIpZWNvdG91cnNtaWxmb3JkLmNvLm56LndlYjEubml4Lmp1Y3kuY28ubnqC
KWVjb3RvdXJzbWlsZm9yZC5jby5uei53ZWIyLm5peC5qdWN5LmNvLm56ggpqdWN5
LmNvLm56giZqdWN5LmNvLm56LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIe
anVjeS5jby5uei53ZWIxLm5peC5qdWN5LmNvLm56gh5qdWN5LmNvLm56LndlYjIu
bml4Lmp1Y3kuY28ubnqCCGp1Y3kuY29tggtqdWN5LmNvbS5hdYInanVjeS5jb20u
YXUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56gh9qdWN5LmNvbS5hdS53ZWIx
Lm5peC5qdWN5LmNvLm56gh9qdWN5LmNvbS5hdS53ZWIyLm5peC5qdWN5LmNvLm56
giRqdWN5LmNvbS5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCHGp1Y3kuY29t
LndlYjEubml4Lmp1Y3kuY28ubnqCHGp1Y3kuY29tLndlYjIubml4Lmp1Y3kuY28u
bnqCEGp1Y3ljcnVpc2UuY28ubnqCLGp1Y3ljcnVpc2UuY28ubnoubG9hZGJhbGFu
Y2VyLm5peC5qdWN5LmNvLm56giRqdWN5Y3J1aXNlLmNvLm56LndlYjEubml4Lmp1
Y3kuY28ubnqCJGp1Y3ljcnVpc2UuY28ubnoud2ViMi5uaXguanVjeS5jby5ueoIQ
anVjeXNub296ZS5jby5ueoIsanVjeXNub296ZS5jby5uei5sb2FkYmFsYW5jZXIu
bml4Lmp1Y3kuY28ubnqCJGp1Y3lzbm9vemUuY28ubnoud2ViMS5uaXguanVjeS5j
by5ueoIkanVjeXNub296ZS5jby5uei53ZWIyLm5peC5qdWN5LmNvLm56ggtqdWN5
dXNhLmNvbYInanVjeXVzYS5jb20ubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56
gh9qdWN5dXNhLmNvbS53ZWIxLm5peC5qdWN5LmNvLm56gh9qdWN5dXNhLmNvbS53
ZWIyLm5peC5qdWN5LmNvLm56gg1qdWN5d29ybGQuY29tgilqdWN5d29ybGQuY29t
LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIhanVjeXdvcmxkLmNvbS53ZWIx
Lm5peC5qdWN5LmNvLm56giFqdWN5d29ybGQuY29tLndlYjIubml4Lmp1Y3kuY28u
bnqCG2xvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIVb3BlcmF0aW9ucy5qdWN5
LmNvLm56ghN3ZWIxLm5peC5qdWN5LmNvLm56ghN3ZWIyLm5peC5qdWN5LmNvLm56
ghl3d3cuZWNvdG91cnNtaWxmb3JkLmNvLm56gjV3d3cuZWNvdG91cnNtaWxmb3Jk
LmNvLm56LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoItd3d3LmVjb3RvdXJz
bWlsZm9yZC5jby5uei53ZWIxLm5peC5qdWN5LmNvLm56gi13d3cuZWNvdG91cnNt
aWxmb3JkLmNvLm56LndlYjIubml4Lmp1Y3kuY28ubnqCDnd3dy5qdWN5LmNvLm56
gip3d3cuanVjeS5jby5uei5sb2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCInd3
dy5qdWN5LmNvLm56LndlYjEubml4Lmp1Y3kuY28ubnqCInd3dy5qdWN5LmNvLm56
LndlYjIubml4Lmp1Y3kuY28ubnqCDHd3dy5qdWN5LmNvbYIPd3d3Lmp1Y3kuY29t
LmF1git3d3cuanVjeS5jb20uYXUubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56
giN3d3cuanVjeS5jb20uYXUud2ViMS5uaXguanVjeS5jby5ueoIjd3d3Lmp1Y3ku
Y29tLmF1LndlYjIubml4Lmp1Y3kuY28ubnqCKHd3dy5qdWN5LmNvbS5sb2FkYmFs
YW5jZXIubml4Lmp1Y3kuY28ubnqCIHd3dy5qdWN5LmNvbS53ZWIxLm5peC5qdWN5
LmNvLm56giB3d3cuanVjeS5jb20ud2ViMi5uaXguanVjeS5jby5ueoIUd3d3Lmp1
Y3ljcnVpc2UuY28ubnqCMHd3dy5qdWN5Y3J1aXNlLmNvLm56LmxvYWRiYWxhbmNl
ci5uaXguanVjeS5jby5ueoIod3d3Lmp1Y3ljcnVpc2UuY28ubnoud2ViMS5uaXgu
anVjeS5jby5ueoIod3d3Lmp1Y3ljcnVpc2UuY28ubnoud2ViMi5uaXguanVjeS5j
by5ueoIUd3d3Lmp1Y3lzbm9vemUuY28ubnqCMHd3dy5qdWN5c25vb3plLmNvLm56
LmxvYWRiYWxhbmNlci5uaXguanVjeS5jby5ueoIod3d3Lmp1Y3lzbm9vemUuY28u
bnoud2ViMS5uaXguanVjeS5jby5ueoIod3d3Lmp1Y3lzbm9vemUuY28ubnoud2Vi
Mi5uaXguanVjeS5jby5ueoIPd3d3Lmp1Y3l1c2EuY29tgit3d3cuanVjeXVzYS5j
b20ubG9hZGJhbGFuY2VyLm5peC5qdWN5LmNvLm56giN3d3cuanVjeXVzYS5jb20u
d2ViMS5uaXguanVjeS5jby5ueoIjd3d3Lmp1Y3l1c2EuY29tLndlYjIubml4Lmp1
Y3kuY28ubnqCEXd3dy5qdWN5d29ybGQuY29tgi13d3cuanVjeXdvcmxkLmNvbS5s
b2FkYmFsYW5jZXIubml4Lmp1Y3kuY28ubnqCJXd3dy5qdWN5d29ybGQuY29tLndl
YjEubml4Lmp1Y3kuY28ubnqCJXd3dy5qdWN5d29ybGQuY29tLndlYjIubml4Lmp1
Y3kuY28ubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAm
BggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdgBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFF
WAAAAW8zEsvCAAAEAwBHMEUCIFkJ/xHRxxmYeLXEciM6gu9q60WRdKNXcebSpUuk
DujTAiEAqRVGCgcg/0LZTQCEo/IfnRoedF5rKwYb1mDN7PrSirwAdwCyHgXMi6LN
iiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAAAW8zEsuuAAAEAwBIMEYCIQCSGcmc
5li3Pdhua93kxixn8b2ftust4YU1yRVPTmc02wIhAOuG2Y3qWIo4eDk3F5sjrl0l
ZpkFLgX0nvfPNMlvRzfIMA0GCSqGSIb3DQEBCwUAA4IBAQCTHWuwn4cjMGm0qALs
BjM2zcaFxAt/ACz7sdlZTbMMWFYNkDzZ3jfDvZ3gpUoxxO4b5ijbJMbrUd+0BQV3
Hvhe7O3M7M2GKAUKx7Ud4DTNJS8/3F/FbDxzjmHGOFOLOVL5aJFR5ifoD/i8k61C
NJOnZ8uocf07v5lM+ZgMxujUR1c19K/lf8CyYwNsDuK97CXmHvtk/4+8KdxDV1Kb
zy1fcoo7W36HBpHDZDxtRxH9NrZXtiUQ4JdBrOnctH0jfFqb6l3CHF+fkeE7osvv
DJO0Ojg6nGVbv/52YP+RqTFEi+MnMTYhI8g+DhGsI4HRhnedCV85EC4aoHKbDR7B
U870
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse7SoKicDtqmORVsgL03
1wjHkeRhJO32Sw+X6faYewfk4Ko2FYnGBSf8omZi2CYbPTa9Wk/ktq3uaHAk5+q5
yxFJZLb7OfFVWKBPRrKb87yPGppLSkJjO0H4TkivSw6Scy/OahmknklAVDBZ3GMU
t3LEfVnxIuxIkQ+ryVjIy7k8kHCrgNVLMzUdE/mZQhxtyywc9j/XTO5dac07LSDM
scBhYszwu+EW5OJ9/9kjqtb5nQ+/Wz/Kwf2ATE1O7d1UdZM+/+8wrj8eWwqZsWSU
MFolmfsytm9dggiBXZG32Cmsc2VIiy2511+Fmyzvx6YhGYNY+vkUTEhzxD0NwtAj
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 308894233085858930420896362720239838655843
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 13:04:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-22 13:04:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22461947873168686463067103615063473520831603275841794527003669532489198458865930445447514275661712241578221696462500957644732100678930900193125494013310339668659605586175453336960444933287440400497814297062014867346798564249202209973294635381142012255507794507652953810269406272418615583771140096015830296973476714990616335169282199713633999655893816304597635824888109043295811660453850751449728016414940530339662308354723002963251221689674602951176734611480857184184191836998236103216587169334818192535470688395693544546977534085002777844423720230081392791030709936951361388464120802356671466940363298463504204309483
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							240a2240eb3254d904270767823c60dddbe38a97
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2475 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cp.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operations.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecotoursmilford.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.au.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucy.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucycruise.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucysnooze.co.nz.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyusa.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.loadbalancer.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web1.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jucyworld.com.web2.nix.jucy.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f3312cbc2000004030047304502205909ff11d1c7199878b5c472233a82ef6aeb459174a35771e6d2a54ba40ee8d3022100a915460a0720ff42d94d0084a3f21f9d1a1e745e6b2b061bd660cdecfad28abc007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f3312cbae00000403004830460221009219c99ce658b73dd86e6bdde4c62c67f1bd9fb6eb2de18535c9154f4e6734db022100eb86d98dea588a38783937179b23ae5d256699052e05f49ef7cf34c96f4737c8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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