www.whangareitri.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:da:23:66:9c:8e:3a:f7:c5:ee:b6:d0:60:7f:d8:cf:75:6e was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.whangareitri.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:da:23:66:9c:8e:3a:f7:c5:ee:b6:d0:60:7f:d8:cf:75:6e
Serial Number (int): 335565469553501914499500006536780733969774
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 66:60:72:f8:d3:b7:7b:38:75:90:00:f8:3e:32:30:77:06:14:8a:d7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:86:61:bf:3c:85:1c:8c:39:3c:16:35:35:94:94:4c:6e:e5:3b:ff
Fingerprint (sha256): f8:e5:5b:ba:10:5a:39:ae:b2:0b:92:f1:cd:bc:ad:f6:58:0a:51:e8:51:9b:27:43:23:fb:e5:d3:f5:b8:0b:5f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.whangareitri.co.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.whangareitri.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

swim.diocesan.school.nz
www.abundantlife.school.nz
www.ahiparagamefishclub.co.nz
www.ararimu.school.nz
www.ashleyforestrallysprint.co.nz
www.aucklandrugby.co.nz
www.aucklandsquashjuniors.nz
www.aucklandtouch.co.nz
www.beckenhamtennisclub.co.nz
www.boptouch.co.nz
www.bowlshawkesbay.org.nz
www.bowlswaikanae.com
www.capitaldarts.co.nz
www.cometswimming.co.nz
www.cornwallparktouch.nz
www.csa.org.nz
www.eakfc.org
www.ecbsoftball.org.nz
www.farmpass.co.nz
www.feildinglawnmowerracing.org.nz
www.generatenetwork.org
www.gisborneboardriders.com
www.glenfieldsoftballclub.co.nz
www.greertonponyclub.com
www.hamiltoncanoepolo.org.nz
www.harbourhockey.org.nz
www.hawkesbaylandingpad.co.nz
www.hbcfc.co.nz
www.hbcfc.org.nz
www.hbsfc.co.nz
www.hockeysouthcanterbury.co.nz
www.hortpass.co.nz
www.hyc.org.nz
www.jcc.org.nz
www.juniorcricket.co.nz
www.jyf.co.nz
www.karakacricket.co.nz
www.karakatennis.co.nz
www.kensingtonfitness.co.nz
www.kiwikidz.co.nz
www.manurewaswimmingclub.co.nz
www.marketground.co.nz
www.marlborough-car-club.co.nz
www.marlboroughparktennis.co.nz
www.marlboroughvolleyball.org.nz
www.morningtonbowlingclub.co.nz
www.mtrbmx.co.nz
www.nelsonfarmersmarket.co.nz
www.nelsonfarmersmarket.org.nz
www.nelsonsoftball.org.nz
www.netballwairarapa.co.nz
www.nhcc.co.nz
www.northharbourcycling.co.nz
www.northharboursoftball.co.nz
www.nskfc.org.nz
www.nzpowerlifting.co.nz
www.otahuhuroversrugbyleague.co.nz
www.parafednorthland.co.nz
www.phcc.co.nz
www.playbowls.co.nz
www.playsoftball.co.nz
www.ponsonbybowls.nz
www.porritt.school.nz
www.prdf.co.nz
www.ratec.org.nz
www.rbpc.nz
www.riverroad.co.nz
www.roosterssoftball.co.nz
www.schoolsportaoraki.co.nz
www.southcanterburytouch.co.nz
www.southernlakesmultisportclub.co.nz
www.sportotago.co.nz
www.stewartalexander.co.nz
www.swim.diocesan.school.nz
www.tabletennissc.org.nz
www.taradale.co.nz
www.tasportscycling.co.nz
www.timarucyclingclub.co.nz
www.torbaytennis.org.nz
www.totaltouch.org.nz
www.touchnorthharbour.co.nz
www.touchpapamoa.co.nz
www.tuki.co.nz
www.twyford.school.nz
www.volleyballhb.org.nz
www.waiopehu.ac.nz
www.waiukuponyclub.co.nz
www.whangareitri.co.nz
www.wmcc.net.nz
www.woodendrugby.co.nz

Other certificates including the domain name whangareitri.co.nz

(limited to 100 certificates)
www.sporty.co.nz
northcanterburyrugby.co.nz
www.rugby-foundation.org.nz
hastings-central.school.nz
www.karakacricket.co.nz
ultrarunner.org.nz
www.rugby-foundation.org.nz
aafl.co.nz
www.hockeysouthcanterbury.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
www.sporty.co.nz
www.rugby-foundation.org.nz
aucklandmarist.co.nz
lucknow.school.nz
pioneerbasketballclub.co.nz
www.rugby-foundation.org.nz
whangareitri.co.nz
www.sporty.co.nz
www.whangareitri.co.nz
basketballtaranaki.co.nz

Certificate

The complete raw certificate details for www.whangareitri.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO0TCCDbmgAwIBAgISA9ojZpyOOvfF7rbQYH/Yz3VuMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEwMTAwMzI0MzBaFw0x
OTAxMDgwMzI0MzBaMCExHzAdBgNVBAMTFnd3dy53aGFuZ2FyZWl0cmkuY28ubnow
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClj0+/pSOTOkER1shIIbmR
Wwqqyov+CTFSqtPxvy99Ad3Od+k+iEnRSP6pqA8690+tLi1pDLTHqLseNdb5Gg3g
jNXSToMtMIOATJWxWgPCqfet+wtUGnp8fWh3FCaX8gYOnVK5DET2Lu9sGpbdgjgj
hCP3VpXgQSKl7WFd97kAQIS9iudyNjs4AHnjZvQbj8ZFsWi+Xu6UZv2eRoHt0KwF
jSfrvcN2Nyn+hxDLppw454hx+PYPCEAf3PA15WKnIgB7mD3LAoV1/KVTZxy43CRT
WyLFz05kbxqRW+k2NeokdR0/UtgL+f/fYeMY78ZXO0fJGcYiXOOCTgyfNIJcQ0yx
AgMBAAGjggvYMIIL1DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFGZgcvjTt3s4dZAA
+D4yMHcGFIrXMB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsG
AQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNl
bmNyeXB0Lm9yZy8wggjbBgNVHREEggjSMIIIzoIXc3dpbS5kaW9jZXNhbi5zY2hv
b2wubnqCGnd3dy5hYnVuZGFudGxpZmUuc2Nob29sLm56gh13d3cuYWhpcGFyYWdh
bWVmaXNoY2x1Yi5jby5ueoIVd3d3LmFyYXJpbXUuc2Nob29sLm56giF3d3cuYXNo
bGV5Zm9yZXN0cmFsbHlzcHJpbnQuY28ubnqCF3d3dy5hdWNrbGFuZHJ1Z2J5LmNv
Lm56ghx3d3cuYXVja2xhbmRzcXVhc2hqdW5pb3JzLm56ghd3d3cuYXVja2xhbmR0
b3VjaC5jby5ueoIdd3d3LmJlY2tlbmhhbXRlbm5pc2NsdWIuY28ubnqCEnd3dy5i
b3B0b3VjaC5jby5ueoIZd3d3LmJvd2xzaGF3a2VzYmF5Lm9yZy5ueoIVd3d3LmJv
d2xzd2Fpa2FuYWUuY29tghZ3d3cuY2FwaXRhbGRhcnRzLmNvLm56ghd3d3cuY29t
ZXRzd2ltbWluZy5jby5ueoIYd3d3LmNvcm53YWxscGFya3RvdWNoLm56gg53d3cu
Y3NhLm9yZy5ueoINd3d3LmVha2ZjLm9yZ4IWd3d3LmVjYnNvZnRiYWxsLm9yZy5u
eoISd3d3LmZhcm1wYXNzLmNvLm56giJ3d3cuZmVpbGRpbmdsYXdubW93ZXJyYWNp
bmcub3JnLm56ghd3d3cuZ2VuZXJhdGVuZXR3b3JrLm9yZ4Ibd3d3Lmdpc2Jvcm5l
Ym9hcmRyaWRlcnMuY29tgh93d3cuZ2xlbmZpZWxkc29mdGJhbGxjbHViLmNvLm56
ghh3d3cuZ3JlZXJ0b25wb255Y2x1Yi5jb22CHHd3dy5oYW1pbHRvbmNhbm9lcG9s
by5vcmcubnqCGHd3dy5oYXJib3VyaG9ja2V5Lm9yZy5ueoIdd3d3Lmhhd2tlc2Jh
eWxhbmRpbmdwYWQuY28ubnqCD3d3dy5oYmNmYy5jby5ueoIQd3d3LmhiY2ZjLm9y
Zy5ueoIPd3d3Lmhic2ZjLmNvLm56gh93d3cuaG9ja2V5c291dGhjYW50ZXJidXJ5
LmNvLm56ghJ3d3cuaG9ydHBhc3MuY28ubnqCDnd3dy5oeWMub3JnLm56gg53d3cu
amNjLm9yZy5ueoIXd3d3Lmp1bmlvcmNyaWNrZXQuY28ubnqCDXd3dy5qeWYuY28u
bnqCF3d3dy5rYXJha2Fjcmlja2V0LmNvLm56ghZ3d3cua2FyYWthdGVubmlzLmNv
Lm56ght3d3cua2Vuc2luZ3RvbmZpdG5lc3MuY28ubnqCEnd3dy5raXdpa2lkei5j
by5ueoIed3d3Lm1hbnVyZXdhc3dpbW1pbmdjbHViLmNvLm56ghZ3d3cubWFya2V0
Z3JvdW5kLmNvLm56gh53d3cubWFybGJvcm91Z2gtY2FyLWNsdWIuY28ubnqCH3d3
dy5tYXJsYm9yb3VnaHBhcmt0ZW5uaXMuY28ubnqCIHd3dy5tYXJsYm9yb3VnaHZv
bGxleWJhbGwub3JnLm56gh93d3cubW9ybmluZ3RvbmJvd2xpbmdjbHViLmNvLm56
ghB3d3cubXRyYm14LmNvLm56gh13d3cubmVsc29uZmFybWVyc21hcmtldC5jby5u
eoIed3d3Lm5lbHNvbmZhcm1lcnNtYXJrZXQub3JnLm56ghl3d3cubmVsc29uc29m
dGJhbGwub3JnLm56ghp3d3cubmV0YmFsbHdhaXJhcmFwYS5jby5ueoIOd3d3Lm5o
Y2MuY28ubnqCHXd3dy5ub3J0aGhhcmJvdXJjeWNsaW5nLmNvLm56gh53d3cubm9y
dGhoYXJib3Vyc29mdGJhbGwuY28ubnqCEHd3dy5uc2tmYy5vcmcubnqCGHd3dy5u
enBvd2VybGlmdGluZy5jby5ueoIid3d3Lm90YWh1aHVyb3ZlcnNydWdieWxlYWd1
ZS5jby5ueoIad3d3LnBhcmFmZWRub3J0aGxhbmQuY28ubnqCDnd3dy5waGNjLmNv
Lm56ghN3d3cucGxheWJvd2xzLmNvLm56ghZ3d3cucGxheXNvZnRiYWxsLmNvLm56
ghR3d3cucG9uc29uYnlib3dscy5ueoIVd3d3LnBvcnJpdHQuc2Nob29sLm56gg53
d3cucHJkZi5jby5ueoIQd3d3LnJhdGVjLm9yZy5ueoILd3d3LnJicGMubnqCE3d3
dy5yaXZlcnJvYWQuY28ubnqCGnd3dy5yb29zdGVyc3NvZnRiYWxsLmNvLm56ght3
d3cuc2Nob29sc3BvcnRhb3Jha2kuY28ubnqCHnd3dy5zb3V0aGNhbnRlcmJ1cnl0
b3VjaC5jby5ueoIld3d3LnNvdXRoZXJubGFrZXNtdWx0aXNwb3J0Y2x1Yi5jby5u
eoIUd3d3LnNwb3J0b3RhZ28uY28ubnqCGnd3dy5zdGV3YXJ0YWxleGFuZGVyLmNv
Lm56ght3d3cuc3dpbS5kaW9jZXNhbi5zY2hvb2wubnqCGHd3dy50YWJsZXRlbm5p
c3NjLm9yZy5ueoISd3d3LnRhcmFkYWxlLmNvLm56ghl3d3cudGFzcG9ydHNjeWNs
aW5nLmNvLm56ght3d3cudGltYXJ1Y3ljbGluZ2NsdWIuY28ubnqCF3d3dy50b3Ji
YXl0ZW5uaXMub3JnLm56ghV3d3cudG90YWx0b3VjaC5vcmcubnqCG3d3dy50b3Vj
aG5vcnRoaGFyYm91ci5jby5ueoIWd3d3LnRvdWNocGFwYW1vYS5jby5ueoIOd3d3
LnR1a2kuY28ubnqCFXd3dy50d3lmb3JkLnNjaG9vbC5ueoIXd3d3LnZvbGxleWJh
bGxoYi5vcmcubnqCEnd3dy53YWlvcGVodS5hYy5ueoIYd3d3LndhaXVrdXBvbnlj
bHViLmNvLm56ghZ3d3cud2hhbmdhcmVpdHJpLmNvLm56gg93d3cud21jYy5uZXQu
bnqCFnd3dy53b29kZW5kcnVnYnkuY28ubnowgf4GA1UdIASB9jCB8zAIBgZngQwB
AgEwgeYGCysGAQQBgt8TAQEBMIHWMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxl
dHNlbmNyeXB0Lm9yZzCBqwYIKwYBBQUHAgIwgZ4MgZtUaGlzIENlcnRpZmljYXRl
IG1heSBvbmx5IGJlIHJlbGllZCB1cG9uIGJ5IFJlbHlpbmcgUGFydGllcyBhbmQg
b25seSBpbiBhY2NvcmRhbmNlIHdpdGggdGhlIENlcnRpZmljYXRlIFBvbGljeSBm
b3VuZCBhdCBodHRwczovL2xldHNlbmNyeXB0Lm9yZy9yZXBvc2l0b3J5LzCCAQIG
CisGAQQB1nkCBAIEgfMEgfAA7gB1AHR+2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1
eeYQe8xWAAABZlw4EvcAAAQDAEYwRAIgAnhSaqdCrJEFWMofxZZWA9/WKNMmRt2O
XM/e3bpTZ1YCIETus+qTFfgLw2WuXt3arQFS+qG9eczzl5GGWGWy5zNCAHUAKTxR
llTIOWW6qlD8WAfUt2+/WHopctykwwz05UVH9HgAAAFmXDgU6wAABAMARjBEAiAP
UwS8ZWpaI7/ubLLifXzWE2bLaLYBW7sHenjcIw1UXgIgaWx9MpW8LDZEowbPf+ms
hVAUeBrlD5mMkCE2ns2kHCwwDQYJKoZIhvcNAQELBQADggEBABTEd2WBKaN+Tiis
8ht/wqxdhChElcgZrvQjYUBjyPhbQpvDpCaYpSyRK/FLosJDHf6+mJeTY6QcHC7G
pVSbm5dsoytLT/70UF63JdYkNGn6M9jZSIzemsKO1UZGm7wHq8RUm/PKyjQbdNvq
kS3LuxOOp6yoT3oL87RO1Y2CsWZI1tI8RX1v0LGvAqFi2QRDSJDGEmOuwxeHq7we
+JCZeATrwn863wVbS1L1xHbtUmi1oZoZlz7QJ+gtH00tgldvH1Aa2ytgZChAzXU9
rq+aijxGUIEssw7iQav0zxYVdXUJpBA7QTfuSh5e0tl2/jO06LoHr+6bvSvhwCnt
hPiOW7E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY9Pv6UjkzpBEdbISCG5
kVsKqsqL/gkxUqrT8b8vfQHdznfpPohJ0Uj+qagPOvdPrS4taQy0x6i7HjXW+RoN
4IzV0k6DLTCDgEyVsVoDwqn3rfsLVBp6fH1odxQml/IGDp1SuQxE9i7vbBqW3YI4
I4Qj91aV4EEipe1hXfe5AECEvYrncjY7OAB542b0G4/GRbFovl7ulGb9nkaB7dCs
BY0n673Ddjcp/ocQy6acOOeIcfj2DwhAH9zwNeVipyIAe5g9ywKFdfylU2ccuNwk
U1sixc9OZG8akVvpNjXqJHUdP1LYC/n/32HjGO/GVztHyRnGIlzjgk4MnzSCXENM
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335565469553501914499500006536780733969774
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 03:24:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-08 03:24:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.whangareitri.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20899989862826156202037895019708042078523507298715979486773997395671895076021174304996554646129822266944037965076943736835852534525507098265675234849328875596305454061147715795467687553225264464817875091293749133405478497516400171650916540502022987433210882264322268110418476702520154063452074262257170752896967863308963691861045502668947959925679284289478790891368210057492513780556163023754637051437173726532185826080127020922988389417153126822199936192100086177629915906052659827677151242441414608175069498165076941345568659023584254989605417590408427580956879562148553205548541923048850600652112934284718965476529
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							666072f8d3b77b38759000f83e32307706148ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2258 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abundantlife.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ahiparagamefishclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ararimu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashleyforestrallysprint.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandsquashjuniors.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandtouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckenhamtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boptouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlshawkesbay.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswaikanae.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitaldarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cometswimming.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallparktouch.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eakfc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.farmpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feildinglawnmowerracing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.generatenetwork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneboardriders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldsoftballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greertonponyclub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hamiltoncanoepolo.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harbourhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hawkesbaylandingpad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbsfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeysouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hortpass.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juniorcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jyf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakacricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakatennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kensingtonfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kiwikidz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewaswimmingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-car-club.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughparktennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughvolleyball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.morningtonbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtrbmx.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonfarmersmarket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonsoftball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballwairarapa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourcycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharboursoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nskfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzpowerlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhuroversrugbyleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parafednorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ponsonbybowls.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.porritt.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prdf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratec.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rbpc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riverroad.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosterssoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolsportaoraki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburytouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernlakesmultisportclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportotago.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stewartalexander.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.swim.diocesan.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennissc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradale.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasportscycling.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarucyclingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.torbaytennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.totaltouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchnorthharbour.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchpapamoa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.twyford.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballhb.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiopehu.ac.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waiukuponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareitri.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmcc.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woodendrugby.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001665c3812f7000004030046304402200278526aa742ac910558ca1fc5965603dfd628d32646dd8e5ccfdeddba536756022044eeb3ea9315f80bc365ae5edddaad0152faa1bd79ccf39791865865b2e73342007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f478000001665c3814eb000004030046304402200f5304bc656a5a23bfee6cb2e27d7cd61366cb68b6015bbb077a78dc230d545e0220696c7d3295bc2c3644a306cf7fe9ac855014781ae50f998c9021369ecda41c2c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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