glenavy.school.nz

Issued by R11

About this certificate

This digital certificate with serial number 03:4b:5f:8c:c9:a5:2d:66:01:48:ad:c5:75:be:6e:89:88:3a was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=glenavy.school.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:4b:5f:8c:c9:a5:2d:66:01:48:ad:c5:75:be:6e:89:88:3a
Serial Number (int): 286985042985361913874196635741770486483002
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4e:14:08:a4:03:bb:fe:53:2a:90:e1:15:68:0e:03:c6:8b:3e:ca:d0
AuthorityKeyId: c5:cf:46:a4:ea:f4:c3:c0:7a:6c:95:c4:2d:b0:5e:92:2f:26:e3:b9

Fingerprint (sha1): fa:4a:0b:42:12:e8:db:27:2a:92:c2:b8:d5:b4:94:ae:09:49:81:6c
Fingerprint (sha256): fa:21:ce:9d:30:64:20:ff:d7:16:f9:02:b6:32:55:46:27:0f:d7:e4:5e:31:90:c8:1b:5b:46:0f:57:84:9e:dc

Issuing Certificate URL: http://r11.i.lencr.org/

Revocation information

OCSP Server: http://r11.o.lencr.org

Check the revocation status for certificate glenavy.school.nz

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for glenavy.school.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aria.school.nz
ashbrook.school.nz
ashhurst.school.nz
awhitu.school.nz
birkdalenorth.school.nz
cannington.school.nz
cosgrove.school.nz
cpanel.two.skoolsites.co.nz
dargavilleprimary.school.nz
ebbettpark.school.nz
firth.school.nz
foxton.school.nz
geraldine.school.nz
geraldineprimary.school.nz
glenavy.school.nz
glenmassey.school.nz
gorgeroad.school.nz
helensville.school.nz
hillside.school.nz
hns.school.nz
horahoracambridge.school.nz
ilminster.school.nz
kahutara.school.nz
kamoprimary.school.nz
kingsgate.school.nz
knapdale.school.nz
lichfield.school.nz
manaia.school.nz
mangatangi.school.nz
matamataintermediate.school.nz
matamataprimary.school.nz
mimi.school.nz
mmps.school.nz
mossburn.school.nz
naenaeprimary.school
ngaruawahia.school.nz
ngutunui.school.nz
norsewood.school.nz
omarama.school.nz
ongarue.school.nz
ormond.school.nz
oruaiti.school.nz
otaki.school.nz
pakurangaint.school.nz
pap-west.school.nz
peninsulaprimary.school.nz
petone-central.school.nz
two.skoolsites.co.nz
www.aria.school.nz
www.ashbrook.school.nz
www.ashhurst.school.nz
www.awhitu.school.nz
www.birkdalenorth.school.nz
www.cannington.school.nz
www.cosgrove.school.nz
www.dargavilleprimary.school.nz
www.ebbettpark.school.nz
www.firth.school.nz
www.foxton.school.nz
www.geraldine.school.nz
www.geraldineprimary.school.nz
www.glenavy.school.nz
www.glenmassey.school.nz
www.gorgeroad.school.nz
www.helensville.school.nz
www.hillside.school.nz
www.hns.school.nz
www.horahoracambridge.school.nz
www.ilminster.school.nz
www.kahutara.school.nz
www.kamoprimary.school.nz
www.kingsgate.school.nz
www.knapdale.school.nz
www.lichfield.school.nz
www.manaia.school.nz
www.mangatangi.school.nz
www.matamataintermediate.school.nz
www.matamataprimary.school.nz
www.mimi.school.nz
www.mmps.school.nz
www.mossburn.school.nz
www.naenaeprimary.school
www.ngaruawahia.school.nz
www.ngutunui.school.nz
www.norsewood.school.nz
www.omarama.school.nz
www.ongarue.school.nz
www.ormond.school.nz
www.oruaiti.school.nz
www.otaki.school.nz
www.pakurangaint.school.nz
www.pap-west.school.nz
www.peninsulaprimary.school.nz
www.petone-central.school.nz
www.two.skoolsites.co.nz

Other certificates including the domain name glenavy.school.nz

(limited to 100 certificates)
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
www.matamataintermediate.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
mossburn.school.nz
skoolsites.co.nz
skoolsites.co.nz
skoolsites.co.nz
birkdalenorth.school.nz
skoolsites.co.nz
www.lichfield.school.nz
skoolsites.co.nz
skoolsites.co.nz
glenavy.school.nz

Certificate

The complete raw certificate details for glenavy.school.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5zbIxRjyM5WYSVQNJCc
73gu3Hzc/i7bG3lkVBM1ASmSMjHXOUd8lTR2gBHLjMMfKOwBQ9jDKpBMi/Ftf5Ti
wJSd8DqvikrqvyB9cMZOhNaWXcLFjRb0771b36Xgtn+jtYPRZ0jurJLDIyAxsmuS
zvoMvblIoENa+iB0jqQwcqAv5c3P/jzqMdYwPwVuSBSw6pwUDk6BTk/09b6LopAf
ZCQYOTTI4G1crMZBcXSQMRbG8RiF2UO9E2yxzt7s9ddvljr37Dxb7uzkExxktrQ4
tLA3oMxhcG/hszu6t6fRUHGqzhrKO/ZBLUdKmPsBtTggHItkzoRjFkuLC83PZZEb
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286985042985361913874196635741770486483002
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R11'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-12 00:01:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-10 00:01:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'glenavy.school.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21664098727600733744137961167810001267897369351701664656275404745634425846654338941931821589771127582859182768282005884129154461957114050805430633801891672157728830755695234974616969282856749350128609508341696208482141449793715676503237251909132119758659948074370509168369314459505358759386063846960877147195880640306023211830479746337264043197275482760232850890226017903914013796023231888671429012314360296963579226801889238065219337753203856691518190757484928480283048574493307519949115080444896401531554786452513499546052527638472759986396779809925643513870252062172036533740725046165315960539216012691087031343989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4e1408a403bbfe532a90e115680e03c68b3ecad0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c5cf46a4eaf4c3c07a6c95c42db05e922f26e3b9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r11.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2221 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aria.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashbrook.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosgrove.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpanel.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebbettpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'firth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helensville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manaia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naenaeprimary.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngutunui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ormond.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'petone-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aria.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashbrook.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ashhurst.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.awhitu.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.birkdalenorth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cannington.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cosgrove.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dargavilleprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebbettpark.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firth.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foxton.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldine.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geraldineprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenavy.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenmassey.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorgeroad.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helensville.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillside.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hns.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.horahoracambridge.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilminster.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahutara.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kamoprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kingsgate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.knapdale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lichfield.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manaia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mangatangi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataintermediate.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.matamataprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mimi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmps.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mossburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.naenaeprimary.school'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngaruawahia.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ngutunui.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norsewood.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.omarama.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ongarue.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ormond.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oruaiti.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otaki.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pakurangaint.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pap-west.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.peninsulaprimary.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petone-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.skoolsites.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000019009f728a3000004030046304402206fd849a0d5935edff408e82c0f5b79d8c9b9fe5998d48e959e52b6dcc4bbb52b022058992b78e0a133bfaa37494f9c61e2c7c7d0d47ef0c6d8e75823bc7def66580c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000019009f7289d00000403004630440220603a46f7659633451b9f5f4227eb8bc00a93f0ef178a0ee2f0a0aa78d57b93bf02203e17a30ed1d08ff7ee9133afca7faab88e8a91de6072ae65bcac8e45744dd6f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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