www.cfc.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:a7:57:3b:93:c4:4b:02:57:8e:43:4d:cb:49:e0:31:8c:7d was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.cfc.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:a7:57:3b:93:c4:4b:02:57:8e:43:4d:cb:49:e0:31:8c:7d
Serial Number (int): 318279965249291550370677746484242145184893
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 1d:82:f8:ff:ab:16:31:82:47:b4:fc:db:c2:52:97:56:b1:aa:6f:ce
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 74:ff:09:dc:60:f2:61:32:eb:28:a0:e5:ae:83:d0:35:4b:15:c9:a0
Fingerprint (sha256): f8:3f:a0:ac:00:b3:c7:8a:9f:af:15:23:fc:f2:e6:92:79:15:2b:a6:9a:d4:d9:fa:a2:eb:72:55:a7:e9:33:45

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.cfc.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cfc.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sport.qmc.school.nz
www.arrowtownrugby.co.nz
www.badminton.org.nz
www.basketballhawkesbay.co.nz
www.bayofislandsdressagegroup.co.nz
www.baysathletics.co.nz
www.belfastnetball.co.nz
www.bluerovers.co.nz
www.bowlsbop.co.nz
www.bowlsstadium.nz
www.bowlswaikato.co.nz
www.cashmere.school.nz
www.cfc.co.nz
www.christchurchfootballclub.co.nz
www.countiesmanukaurugbyleague.co.nz
www.crossrecreationcentre.co.nz
www.ctfc.co.nz
www.cyclingsc.co.nz
www.eden.rugby
www.ellerslieeagles.co.nz
www.fastpitch.co.nz
www.feildingfarmersmarket.co.nz
www.feildingfarmersmarket.net.nz
www.feildingfarmersmarket.org.nz
www.frasertechcricket.nz
www.glenfieldrugbyleague.co.nz
www.golfnorthland.co.nz
www.goodmanrural.co.nz
www.greenacrescountry.org.nz
www.halswellunitedfc.co.nz
www.hampsteadclub.co.nz
www.harbourcityhockey.org.nz
www.harbourgolf.co.nz
www.havelocknorth.rugby
www.hawkesbay.basketball
www.hawkesbaynetball.co.nz
www.hawkfootball.org.nz
www.hbbct.org.nz
www.hbbusinesshub.nz
www.hbnetball.co.nz
www.hbreds.nz
www.hbrugby.co.nz
www.hockeymarlborough.org.nz
www.hockeywairarapa.org.nz
www.hokowhitubridge.org.nz
www.horouta.co.nz
www.hsobburnside.co.nz
www.huianetball.co.nz
www.kerikerimtbclub.co.nz
www.kirweerugby.co.nz
www.maristalbion.co.nz
www.maristrugby.org.nz
www.marlboroughtrampingclub.co.nz
www.marlinsnetball.co.nz
www.membermanager.co.nz
www.metrofootball.org.nz
www.morningtonbowlingclub.co.nz
www.mountsports.co.nz
www.mtsquashclub.co.nz
www.northgolf.nz
www.nzblackpowder.nz
www.nzteachersgames.co.nz
www.otakisportsclub.co.nz
www.papakurarugbyleague.co.nz
www.patoka.school.nz
www.photocard.co.nz
www.playsoftball.org.nz
www.ponsonbyrugby.co.nz
www.prebbletonfootball.co.nz
www.referees.co.nz
www.sailhbc.org.nz
www.schoolsport.nz
www.schoolsportnz.co.nz
www.schoolsportnz.org.nz
www.sked.co.nz
www.southcanterbury.basketball
www.sportauckland.nz
www.st-marys-wellington.school.nz
www.stmaryswellington.school.nz
www.stmw.school.nz
www.taradaleint.school.nz
www.tasmanvolley.org.nz
www.tepukeunitedfc.co.nz
www.waimakunited.org.nz
www.wanakafootball.nz
www.wdta.org.nz
www.westlandmotorcycleclub.co.nz
www.westshore.school.nz
www.whangareinetball.co.nz
www.worldpowerlifting.nz

Other certificates including the domain name cfc.co.nz

(limited to 100 certificates)
www.sportycrm.com
www.giafc.co.nz
sportycrm.com
fdmc.school.nz
arrowtownrugby.co.nz
www.sportsground.com
www.sportsground.com
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
freyberg.ac.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
sporty.org.nz
www.sporty.org.nz
www.ams.school.nz
www.skeggsfoundation.nz
cfc.co.nz
www.cfc.co.nz

Certificate

The complete raw certificate details for www.cfc.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoj7l0f1V+RnJOuZQ+WTP
u3EjwFlFX549QAS4PkF93fSrMksMNuGsun83GpVB4C6khGypNZlOes/jWl74NTcC
u6uHA3yr6HTGjZEkgWrwq/KuYbRVq9j4LK19Lf/hIQqUIBHx31UDfXDCK+zqGkkI
L0mgYMO3GAkSERgbf5hk+e2oZGN40REbzifpORlwTZIAGWAIeZRwXjOvA/zesvao
VBJJdvAwjwJoSmQ9N7PlZVyK+RcxmfUEa0LVPotCFDwfVgfkugbYIjWNpCkeswSH
/X3coI6j5meD3pCSU6eY9LA5O56PYPPT9Uk2bgW1nq1IZ5Uq29zuT7dsSFhaEyBc
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318279965249291550370677746484242145184893
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 04:15:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-27 04:15:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cfc.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20481621433828679059121209820724524891837988881806690677508708500295545255781136251559137388634375246133977845940095887443202329322105528126404520725645903381316999216791443597506328864030246388065719273005178627040685016775679869028571628003160924088542223475683908084154372383688658394787147310987029508722700494255552329750305426234929878316222856761777640672076467731035214193050488396332599403159128041067961555017439185897466509521167318791180103233859800965934684016880272508176999264852424046845343152752692147527215938832162843616680054364991071409923481423419091541057052267930333158549163484570796389587977
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1d82f8ffab16318247b4fcdbc2529756b1aa6fce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2284 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.qmc.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arrowtownrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballhawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baysathletics.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belfastnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsstadium.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikato.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cashmere.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.christchurchfootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.countiesmanukaurugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crossrecreationcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ctfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cyclingsc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eden.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ellerslieeagles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastpitch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildingfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.golfnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.goodmanrural.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenacrescountry.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hampsteadclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourcityhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourgolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.havelocknorth.rugby'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbay.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaynetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbreds.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymarlborough.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hokowhitubridge.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horouta.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.huianetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kirweerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristrugby.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtrampingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.membermanager.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.metrofootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northgolf.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzblackpowder.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzteachersgames.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otakisportsclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakurarugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patoka.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.photocard.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbyrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.referees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsport.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sked.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterbury.basketball'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportauckland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.st-marys-wellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmaryswellington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stmw.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradaleint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanvolley.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tepukeunitedfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waimakunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wanakafootball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westlandmotorcycleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westshore.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareinetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016c3c2799340000040300473045022100f21fa20352c3004ba879a68f0c8026b28b50bd438a37e5d3cd55b54f0451962d02200db7cbbe72a19d010459331d963d63ddbb8a5f734361299e0ed1d95f2bad29b900760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c3c279956000004030047304502210095be9ec42a16be9fdff7b0bc501a296e87ad77d7966663f7e016a9c774cfe81902203536773546484897d03834382ee3dcbf78a2ccddc4274136c4e999bf96d3fb95
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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