yes.stockx.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:c3:8d:b0:8a:af:82:c7:72:a5:d8:2d:e0:a7:cc:fe:41:b9 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=yes.stockx.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c3:8d:b0:8a:af:82:c7:72:a5:d8:2d:e0:a7:cc:fe:41:b9
Serial Number (int): 327880257149394443495822530046376193966521
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1a:6d:f2:ba:ec:52:f5:42:59:66:e4:7e:b1:f3:26:17:e0:81:a1:6c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:13:44:b0:3d:b7:ff:0a:c6:85:ac:2f:5b:d4:20:c6:55:a9:8f:71
Fingerprint (sha256): f5:b2:92:5a:e1:a4:d1:6e:ed:e0:c1:09:15:c0:14:e4:c0:d2:c4:66:f5:43:34:73:40:14:79:0a:20:57:a9:33

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate yes.stockx.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yes.stockx.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aafl.co.nz
www.actc.org.nz
www.acwpa.co.nz
www.aucklandmarist.co.nz
www.badmintonhb.co.nz
www.basketballtaranaki.co.nz
www.belmontparkbowlingclub.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.bushmultisport.org.nz
www.canamju.org
www.canoeslalombop.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.edenrugby.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.grammarcarlton.co.nz
www.grammartec.co.nz
www.halswellcricket.co.nz
www.hastings-central.school.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.marchingcanterbury.co.nz
www.mariancollege.school.nz
www.maristfc.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.oacnz.org
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.rangitikeigolfclub.co.nz
www.seatounafc.org.nz
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.stheliersbowlingclub.co.nz
www.stjos.school.nz
www.stjosephschb.school.nz
www.suburbsrugby.co.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.taierirugby.co.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.timarusquashclub.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz
yes.stockx.co.nz

Other certificates including the domain name stockx.co.nz

(limited to 100 certificates)
*.stockx.co.nz
save.stockx.co.nz
www.ophc.co.nz
*.stockx.co.nz
*.stockx.co.nz
www.ophc.co.nz
*.stockx.co.nz
www.rollestonrugby.co.nz
*.stockx.co.nz
yes.stockx.co.nz
www.baseballnewzealand.org
yes.stockx.co.nz
www.westcoastsoftball.co.nz
www.mttauharagymnastics.co.nz
yes.stockx.co.nz

Certificate

The complete raw certificate details for yes.stockx.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvjdc57yJP5yTmOx+YMy
0mIB2qvO8HDq4qxEgIG30fPrr2Gfu/ny9K8yVOqnPYmUijUd39UUswAWifxaJLIN
TkD+rFPvFtMYAIXWL3IpYtdXdfpN7a/1rxhMWlEwNMkmUrcbMPM3Hnj3ng1nv+/8
wldhTw8qBXpTf5ZL7BqOb7+yBussRhyGDcPFpfgX0eOz3TBYulHUnz+T7O4f362m
Dz7ihRqo1GvoqtNiL7wPjQaerVT80lBAGUBY9w3XFAube6B5xS8T4XQXFQw0RDvG
qf1gmufUF+gm/JvMY81fedWyRKuz7oONthNBWfDmJCap+4JOSZzSBwpK98GijFAD
oQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 327880257149394443495822530046376193966521
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 11:44:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 11:44:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yes.stockx.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18553512452807386559390430394946089975098982915290905518130772692727198610123801242478484288058886856968470586598168221578347737193299251237040137098034835692995782267115130771586185892523602930234819187580079376234095213727046359562883761266214996541759055056765033546315416264505801533645839827964866395634088487351524868392444474839830312852637519377986141363306578977468902532405090076320474073666837985720501421966629166589988353623446644788794184013477310121715610262047745048999528026451416387156886845115084923022575658450686452097427842423855640213737415895440103877264856260535347174649721041476606854431649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a6df2baec52f5425966e47eb1f32617e081a16c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2259 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammarcarlton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grammartec.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yes.stockx.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3dc25cc9000004030047304502207073fa51c2fe6b600aed8c127502866883ee3ddb8d7cf5703ba98c0b3619d62a022100aa91dc0d9f59267c6768e6e37519b880d6d197e867c3b81807525fcdc01c4e68007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3dc25ece0000040300463044022019d75787c3a4399c78fec24ec262b674b14caf8cb544497ef473cad9d7edc5ff0220555e34b706e69ea1a380719696b3040b16a63f9569ad5d806819cbe5e1725b6c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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