cfc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:0b:d1:13:da:d8:66:e1:6d:66:8a:9f:db:23:5c:05:bb:1c was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cfc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:0b:d1:13:da:d8:66:e1:6d:66:8a:9f:db:23:5c:05:bb:1c
Serial Number (int): 265357875574880839312216600245409941928732
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c0:6d:ad:45:91:ce:08:9b:4f:96:56:61:d5:c6:be:fb:4b:0b:7b:29
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2c:44:b2:eb:ec:de:73:a3:f4:59:f0:e0:6e:3a:c0:3b:d7:51:d9:aa
Fingerprint (sha256): f6:51:33:4c:73:e7:93:0c:90:92:b0:9b:ee:87:1f:58:32:ca:a4:3f:6c:4b:69:34:62:84:c4:8a:14:1e:8e:9c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cfc.co.nz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cfc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akaranacityrifleclub.co.nz
arrowtownrugby.co.nz
basketballhawkesbay.co.nz
bopgolf.co.nz
bowlswaikato.co.nz
burwoodparktennisclub.kiwi
canterburywaterpolo.org.nz
cashmere.school.nz
cfc.co.nz
christchurchfootballclub.co.nz
countiesmanukaurugbyleague.co.nz
crossrecreationcentre.co.nz
ctfc.co.nz
cyclingsc.co.nz
eden.rugby
edenrugby.co.nz
ellerslieeagles.co.nz
feildingfarmersmarket.co.nz
feildingfarmersmarket.net.nz
feildingfarmersmarket.org.nz
glenfieldrugbyleague.co.nz
golfnorthland.co.nz
goodmanrural.co.nz
greenacrescountry.org.nz
hampsteadclub.co.nz
harbourgolf.co.nz
havelocknorth.rugby
havelocknorthbridgeclub.co.nz
hawkesbay.basketball
hawkesbaynetball.co.nz
hbmagpies.co.nz
hbnetball.co.nz
hbrfu.co.nz
hbru.co.nz
hbrugby.co.nz
healthyfamiliesinvercargill.org.nz
highlightcam.co.nz
hockeymarlborough.org.nz
hokowhitubridge.org.nz
horouta.co.nz
hpnc.org.nz
huianetball.co.nz
invercargillnetball.co.nz
karakarugbyclub.co.nz
kirweerugby.co.nz
kjcc.org.nz
marlboroughtrampingclub.co.nz
marsdensport.school.nz
membermanager.co.nz
merivalepap.co.nz
metrofootball.org.nz
mountsports.co.nz
mtbtauranga.co.nz
nzblackpowder.nz
nzssfootball.co.nz
nzteachersgames.co.nz
otakisportsclub.co.nz
papakurarugbyleague.co.nz
patoka.school.nz
photocard.co.nz
pngolf.co.nz
pointrugby.co.nz
ponsonbyrugby.co.nz
referees.co.nz
register4rugby.co.nz
schoolsport.nz
schoolsportnz.co.nz
schoolsportnz.org.nz
sctrials.co.nz
sked.co.nz
southcanterbury.basketball
sportauckland.co.nz
sportauckland.nz
sportauckland.org.nz
st-marys-wellington.school.nz
stmaryswellington.school.nz
stmw.school.nz
supersixes.co.nz
taradaleint.school.nz
tasmanvolley.org.nz
taurangafarmersmarket.co.nz
totaltouch.org.nz
turbotouch.co.nz
turbotouch.org.nz
waihibeachtennisclub.co.nz
waimakunited.org.nz
wanakafootball.nz
wdta.org.nz
wellingtonsoftball.org.nz

Other certificates including the domain name cfc.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for cfc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq8p0BjjpIe0TmdmZhMCY
vFm5UvSNE1cqj9cX4sMWZCfj9zCSvSIjWwIoXF/z+bswHIfjOO/msXXNU4eP2jN8
SOgnAh4VjG7icSCwIZzeXK+R4TnUEQAeyH6IQLTmV4RieomU5S6nqYs8uKFLVK4w
nm8bFD1DY3OxxWivuxDWHVCkqFB/pjxWb6uZPWvPkbnvxUH4dFRMemiGJnjKsDiS
K/zmQIeBvIWS8gtp74t6FiDbJ9PEGBqR2A8cvOeoHj+mh9gcB1WWu454fF6rupBy
eg/0/U/UVx3FtmJvw8TFClzly6zXtqGNSVrLMzsC6vxn5UgfkzJ84mnR6iQshYOd
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 265357875574880839312216600245409941928732
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-30 21:51:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-28 21:51:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cfc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21686583552792749629862673143642638068377691956343566750359680785301391273098190490638808802954141567875825058679484962799705789764504507641265312400570567070235330498512177085018622248471571115636489413359283423781805043252299367551586902084082945344572461562479638924748062104434059985276113302635321511055894909901820626489716307073179513171890856958609251814822903057587437590560708043746279037832944563621226417226111563960150712907772491829402409353025899441385603105201745178230409903607897929970465184146214744805521405642541488256713890502126977314711897082857825353591609382533896211231109579137957530672547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c06dad4591ce089b4f965661d5c6befb4b0b7b29
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1909 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akaranacityrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bopgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burwoodparktennisclub.kiwi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburywaterpolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelocknorthbridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbmagpies.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbru.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'healthyfamiliesinvercargill.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highlightcam.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hpnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invercargillnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karakarugbyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marsdensport.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merivalepap.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtbtauranga.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzssfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pngolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pointrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register4rugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sctrials.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supersixes.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taurangafarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonsoftball.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c451533790000040300473045022100d64ea4c339e374eb9e2e32a9111f724a284a3f94bb20978f76f7bee38815eac7022074516c2b51ceda3013818428e0cead30ec25725db990c6393a9180ce015ee4df00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c4515336a0000040300473045022100fe5bef831ff932687a70b7997f39560967a3e5bbd7f2452022686bcf4f24bf1202200ff880a39b083a85872383d15132f685d1e440301f0770706000fcfb3afcdc8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00628d3cc58115acd430cdd6755bf5b0984769a689cfeca676f4a60e5fa1245d1fb81e4e7207a1130566bfe5bd23abe0645bf27ba566fbf834215bf8610eeee2139ea83a3ab0698b1c595b17fd874f16fa085fd431da04dbb1e5d9f0949c35382398b159f58ed5c08c9a6530b4dc2dcb35067c42eaeeb27cc132d4d1d95312f4d071514742440b50b6c0a3c5315116406a4e68674b72f3506b695c20af3909ad1efac39ee76074431dbbd659560f3720b11fd694eef7754e01076c746ac980d33afa5ab2fa43e1db841e55ee220c98e366028cd147fe2ce99a23d19c8bba0f288a4fb0654dc1e95b2922b229ec9574cd4f3fe7396e80ab86afb0118950d4227982