www.pauanuilifeguards.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:41:a1:ac:c3:cd:19:be:1c:e9:bc:34:30:43:71:50:4f:b0 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.pauanuilifeguards.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:41:a1:ac:c3:cd:19:be:1c:e9:bc:34:30:43:71:50:4f:b0
Serial Number (int): 283670114398842392496069764862357038714800
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: bd:24:f5:17:56:2f:4b:c7:4e:f0:f0:ad:79:01:31:68:17:a1:33:c2
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 32:e7:31:87:6c:ff:eb:12:4f:ce:f8:d3:8c:28:fe:30:72:f8:1b:f3
Fingerprint (sha256): f9:6e:9a:91:f8:61:61:68:76:ec:e5:42:18:c7:a9:65:75:15:4b:ac:0c:10:63:5b:b5:a7:40:f1:bd:15:14:00

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.pauanuilifeguards.org.nz

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.pauanuilifeguards.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

music.rosmini.school.nz
sport.rosmini.school.nz
www.aoraki-dragons.co.nz
www.ardmoremarist.co.nz
www.arra.org.nz
www.awateregolfclub.co.nz
www.bayolympic.co.nz
www.blokarthb.co.nz
www.bopbadminton.co.nz
www.bowlsomanu.co.nz
www.burwoodafc.co.nz
www.businesshb.nz
www.canoeslalomnz.org.nz
www.capitalbaseball.co.nz
www.capitalfootball.org.nz
www.carltonjuniorsrugby.co.nz
www.clevedontennisclub.co.nz
www.cmydt.co.nz
www.cornwallcricket.co.nz
www.druryfootball.co.nz
www.ecbafc.co.nz
www.foxtongolf.co.nz
www.gksports.co.nz
www.glenviewsoccer.co.nz
www.greenhithefootball.org
www.helensvillerugby.co.nz
www.hockeymanawatu.org.nz
www.howicknetball.org.nz
www.katikatifc.co.nz
www.kaumatuatc.org.nz
www.kbhs.school.nz
www.mainlandfootball.co.nz
www.maristinvercargill.co.nz
www.marlboroughfootball.co.nz
www.mbnc.co.nz
www.mosgielafc.co.nz
www.mrra.co.nz
www.nelsonbaysfootball.co.nz
www.newplymouthcroquetclub.co.nz
www.nhrra.co.nz
www.norths.co.nz
www.northsrugby.co.nz
www.nsu.org.nz
www.nzfootball.co.nz
www.oratiaunited.co.nz
www.osssa.org.nz
www.otahuhusoccer.org.nz
www.papakuracityfc.org.nz
www.papakuranetball.nz
www.papakuranetball.org.nz
www.papamoafootballclub.co.nz
www.papamoafootballclub.nz
www.papanuiredwoodafc.co.nz
www.papatoetoeunited.co.nz
www.parklandsunited.co.nz
www.pauanuilifeguards.org.nz
www.pcbasketballclub.co.nz
www.phoenixsynchro.co.nz
www.ravensbourne.co.nz
www.rivertongolf.co.nz
www.royaloakbowls.co.nz
www.sasfootball.club
www.sasfootball.org.nz
www.schoolground.co.nz
www.slalomnz.org.nz
www.southlandfootball.org.nz
www.speedway.co.nz
www.sportcanterbury.org.nz
www.sportnorthland.co.nz
www.sportnorthland.nz
www.sportsportal.co.nz
www.sporttasman.org.nz
www.sportwaitakere.co.nz
www.sportwaitakere.nz
www.sportyapp.co.nz
www.sydenhamrugby.co.nz
www.takapunaafc.co.nz
www.taradalefootball.org.nz
www.teawamutuafc.co.nz
www.thesalmonrun.nz
www.ths.school.nz
www.unimountafc.org.nz
www.waihekeunited.org.nz
www.waitakerecityfc.org.nz
www.waitakererugby.co.nz
www.wakefieldfc.nz
www.westernafc.com
www.worldseriescricket.co.nz
www.wsra.nz
www.wssfa.nz

Other certificates including the domain name pauanuilifeguards.org.nz

(limited to 100 certificates)
amdg.org.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
squashauckland.org.nz
www.akaranacityrifleclub.co.nz
sporty.co.nz
www.cyclingsc.co.nz
sporty.co.nz
sporty.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
amdg.org.nz
sporty.co.nz
sporty.co.nz
www.mooloocommunityrugby.co.nz
belmontparkbowlingclub.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
sporty.co.nz
www.christchurchmetrocricket.org
www.marlinsnetball.co.nz
www.sportsground.com
sporty.co.nz
www.pauanuilifeguards.org.nz
trfu.co.nz

Certificate

The complete raw certificate details for www.pauanuilifeguards.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43ofkCVxU2JxUsCCR8ms
uhnPsBPewHNfi2eQQuXAjW9VKSAeqIJUYxCcP7K9cygztCKrGQjh8yaBeIeXSOug
AkOjbmoB9ybzW/oMFWMBrsv3btjhqG58S9eD0Y5BIpHCrYyF41b0uUX0rjhoNT+A
NzI49j9b4CNkKxa+AkY18evmbGNFVqWuTliqBmN1KZ3G6RD6de+P7xWaZNDBx995
NBdZht+9Q772t9GGD/75dz2XWUrXrxySs7Cm5YwsUVL4D8Z2ERNMHTq0mTX0xcYo
APVHp1sxh67kcyFxqijQfvW3pCj0Alvil2GiBAVtPn0GWw18uEx6JwFpO9Mxbaxb
gQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 283670114398842392496069764862357038714800
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 04:56:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-02 04:56:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.pauanuilifeguards.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28716316467671957594322316760508002098789682811077169835252456568349314669220834763234669584579940649249028897833620153076303173535998673746844314658758148885919064387748684606551888323509675763408145118390420838304397357777957056537564998993821231120790691632219941912200617295509810306970555694596718631739256717709087766344812762496321886540596389777146518052746710880093794960927541275128738834198067612815466425343894861055806981420954484502132235984120015760798741164495346730348990562605090750871576752930561695127465987686979478459140630075807889838637491971000626228549484732265706784765945220600726452722561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd24f517562f4bc74ef0f0ad7901316817a133c2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'music.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport.rosmini.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aoraki-dragons.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ardmoremarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awateregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayolympic.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bopbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlsomanu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.burwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.businesshb.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capitalfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carltonjuniorsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedontennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmydt.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cornwallcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.druryfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecbafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxtongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gksports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenviewsoccer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.greenhithefootball.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensvillerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicknetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.katikatifc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kbhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mainlandfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbnc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mosgielafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonbaysfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newplymouthcroquetclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhrra.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norths.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nsu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oratiaunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osssa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otahuhusoccer.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuracityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papakuranetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papamoafootballclub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papanuiredwoodafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.papatoetoeunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parklandsunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phoenixsynchro.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ravensbourne.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rivertongolf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slalomnz.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedway.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportcanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportnorthland.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsportal.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sporttasman.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportwaitakere.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportyapp.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sydenhamrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.takapunaafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taradalefootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutuafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thesalmonrun.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unimountafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihekeunited.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakerecityfc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitakererugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wakefieldfc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.westernafc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.worldseriescricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wssfa.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a41df0570000040300463044022026f40709aeb5a30122b3ef7d2cc9558c9ba2afc25597af72c85ec647838bfc4802205ec3da7ec491fdbf71216b9505ddaf11c714d9f10b96e2869424a10b14f99d3100750007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c00000170a41df05d00000403004630440220527f868055687eea1559e0b9862ebfc255063b9f5fe6a6feacb42be0395806fd022006f60f372786b2f07f3b4b54c1e2908f7abf21501d4c876dfc9417cbe5d59f2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00169c329690f16ed77ccdac66ab8d45149d106e47ebe630ae0ef0522eaae93af9fa0315aeca53194045b6e9b5dcd0e958a7891d00505b77a0a102874c9f5c2d55f0a4d20e1de0acc31b7608c5c9502e9fbe7cc00b8dd3615d2a9c9cf9d53b8508c8a41409bcf31640b8a0f67cfa8321a815c413929e622289087211424ac2362edb3ee02b3ebdc66683e58a188c78c18536b610f19ddfa848f9eaf8512f1d47373e3d92e3e974de774b605afab46a4d36169def0660290cb2ddc026cb62b3991106a98c4b96ae8da54e6a87de6b15b1a721e6abae54bd45dbc87e726c4ba4e074745403a9251815f7f01ede236e05bcab9c4e2bfe76f1f0a11f7cbfd706d7e1b7