www.rugby-foundation.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:78:3f:cb:b6:5e:bd:7a:d6:91:50:15:a7:94:aa:c4:fe:06 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.rugby-foundation.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:78:3f:cb:b6:5e:bd:7a:d6:91:50:15:a7:94:aa:c4:fe:06
Serial Number (int): 302255540924694724135496250957450296229382
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 74:3d:10:6b:65:83:4b:63:b6:24:01:b5:b2:d8:ba:13:4a:59:2a:b9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f7:4c:fd:d5:70:8f:f8:a1:ec:88:be:1b:66:47:d9:75:55:98:ef:5a
Fingerprint (sha256): f4:fc:46:13:31:d0:2c:63:e7:9a:1f:aa:04:8b:23:7d:dc:f5:db:58:5e:6d:2c:24:04:33:65:bd:ae:06:b8:84

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.rugby-foundation.org.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.rugby-foundation.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

howicksoftball.co.nz
olympicwrestlingnz.com
starling.org.nz
swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlsnapier.co.nz
www.bowlswaikanae.com
www.cometswimming.co.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hblp.co.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.howicksoftball.co.nz
www.huttaikido.org.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.lincolnbowlingclub.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtbtauranga.co.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.olympicwrestlingnz.com
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.sissnetball.co.nz
www.southcanterburytouch.co.nz
www.sportotago.co.nz
www.squashauckland.org.nz
www.starling.org.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.tgahockey.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name rugby-foundation.org.nz

(limited to 100 certificates)
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.sporty.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
squashauckland.org.nz
www.karakacricket.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.hockeysouthcanterbury.co.nz
sporty.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
www.rugby-foundation.org.nz
www.sporty.co.nz
trfu.co.nz
sporty.co.nz

Certificate

The complete raw certificate details for www.rugby-foundation.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2zIb+pz55FT49LFw1e8
f9AA4tfMF4dwBS5UxvAx/RU/Oq+DJC5deXe0e5euMULeasZM335Y51N4qYMLbepc
7wm4Ax/YyRAOpqKIXwsi5TEEFHN4T0nRvjRYVUEkyQQV81Xyj6RypKxUN0GmvvAe
EZN9pqCMuWPlLCKE4Iw2exyJ72OB4Lt2h5qw58rQRd4fPK57UZXqYpUDKnpgcUJi
TAObis0+Ci3iefAMIytFj9lAwgflIAZnXRauFSraKKmmn/kNsFrf6EU7VW+1yVCR
ah21+u1zABYz+TTxgE5EUe6/xKJgTuH2gbRYHvAvZXnQ+wQ6DRW0Mpp8/rtvovWo
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 302255540924694724135496250957450296229382
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-17 22:59:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-15 22:59:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.rugby-foundation.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24670112344120688750960148913759621664974171232106237567375069641959210195313287852811658313217207212016690206205462745548675283288549082559950419979591038049089733162226063601838839075709974148780090417892291219051556262105747205314313088099893820742924420004433288129929656633227280704776601730232322536515332288455080172946413170033263782600837981391149296274260712089525828462430093796575212672812592247429579627876023946279259827983126756930313866509609463133953925700952024714810104962351651005975782443747392555060614539256022786017785026569790469229847915070584633568382733100930431245907233389243842363238647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							743d106b65834b63b62401b5b2d8ba134a592ab9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2193 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsnapier.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huttaikido.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.squashauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.starling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016e7bce601b0000040300463044022072d1fc84ebdbe29ce51d0ae6126f59255a6cfe6eece72b68fba42f1dbb2a2a2b022036b826d7b9c6f64464a6bffa71a0f87c463792d2e6253d8de5a25296176c3c94007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016e7bce600b00000403004730450220742da5ce6f6315db523a1604fe50ef35d4bbc0e5b09a962267da4e2cb49dc48f022100e1e961606125345b2b0eacf77391f0669ec0c175931e43cd8daf07f97680d4a1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0014b301e6a4ae70f04713a8ae161a9dbb429cff94ae3ea48af1d95c652047b70d1772b49ed108fa98bed25c1f6d8ea301f07b88b0613febac4918753007e1646cfbf7b9722b49e5e11caf22caea067575e80a2d6ac1a2a93ec79635f8dacc3eaf7db2384abb01c2d163c0ad501cc9944252343ec1a81690cace2e7dca9e7576d0a6e5c79464c870d714f48813fb726222203962190badf4ad4c699641125866b73be73b1ecf54debb77bc7a934843463a66be02f919c3f246c052b001e800434d00748ae2f999ee187687f451606e417e399f5c1ab49195b65351daa2fcb93059591ed01305ac48f8720f80967f1af603b3d4b6d56d1b4addd9c3eec85c796994