www.sporty.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:3b:95:80:b1:e1:28:9d:19:53:4a:c8:b4:af:ce:b9:ce:99 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.sporty.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:3b:95:80:b1:e1:28:9d:19:53:4a:c8:b4:af:ce:b9:ce:99
Serial Number (int): 281612240636811359940607224383804861435545
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 07:60:cd:64:ad:a7:89:99:5f:e6:81:db:7a:3b:e7:4f:8d:cb:f7:7f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1d:0a:75:98:20:89:d4:18:44:bd:e1:ab:d6:60:a3:bf:48:8a:e3:c3
Fingerprint (sha256): f7:19:70:f7:d8:c3:fe:cf:8a:ed:9c:b0:ed:b5:e3:75:e5:59:cb:69:2f:b6:ce:10:77:cd:5f:98:18:c6:90:d5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.sporty.co.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.sporty.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

howicksoftball.co.nz
olympicwrestlingnz.com
swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.beckenhamtennisclub.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.cometswimming.co.nz
www.cornwallparktouch.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hblp.co.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.howicksoftball.co.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.lincolnbowlingclub.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.olympicwrestlingnz.com
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.rangatiragolf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.rugby-foundation.org.nz
www.schoolsportaoraki.co.nz
www.sissnetball.co.nz
www.southcanterburytouch.co.nz
www.southernlakesmultisportclub.co.nz
www.sportotago.co.nz
www.sporty.co.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.tgahockey.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name sporty.co.nz

(limited to 100 certificates)
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
turbotouch.co.nz
www.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
mtrbmx.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporthb.net.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
uat.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
www.sporty.co.nz
www.logicorp.co.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
uat.sporty.co.nz
sporty.co.nz
www.sporty.co.nz

Certificate

The complete raw certificate details for www.sporty.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEPetTlOUKw1RJkGLYqw
/+BThrLLEx3KjuTjUUH4X52WhYWFnxGXvJKr/vY3Ppm8c6kDGgO1O3TG6El/FRB8
B/cd/Tbugo54a7PGWG8X5NeJGsxg/tYS9zh3Y5wkQALjO4JLGbdkGK1qoyrIwUxR
E2aw6qHqU/gTuYB5PTz3QhFCIp7etoAVHI6nL+TzAxR0y4QVL+whC1N/Z3eXl/nk
1AVXEyUNw5IrPAmOQf4+TGCEwgv2yiiQ2zzvyGlGyNh6o0z/07zVUe+JaXmNkIcs
AumQsMocFPt2mBrU2yINZfGFMKT5y3U64gGN6Po8BWB9IN4olbiuJP3JCW2uC6u2
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 281612240636811359940607224383804861435545
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-28 23:07:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 23:07:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sporty.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22251409595097057617377887354595400965655321233425074459476724099266804757910921496124586955206470933293853602301113436746889211194974255458813802768415171924777170215172671792902774547822533056522396140166975163699950348275810788367179558489185365621258074301504921525997648026494717508892010482777369349307169438470824098631936620850820458728361922164368103788460048515992400596158858769132498851810505144823962304304893932114436666848980396794539731572392504039203672598355458461862974974131373166932982402284769623854973429011310071029562423739969546243466792783202916328492837132514374091855349689678188937721441
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0760cd64ada789995fe681db7a3be74f8dcbf77f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hblp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olympicwrestlingnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangatiragolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sissnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporty.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tgahockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c3b0e199f0000040300473045022100d58471fb2bb7465014500ed5c60e34b5aad2e131b4b602f98666cb6f9f3d21d902206c8e610e45c0232f70154bd6097bb06f08745efea07125acb81277beb60196b000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3b0e199000000403004630440220017acd4a1e91d93a9893a57ff86490b12c29671a7515b0f48ca6797a8f69f71702202bd77b477042a6b1bb36d4c27b5c8cbdde707397d4a18ac2130c41135c77d07c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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