trfu.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:47:76:68:8e:fd:2c:05:69:88:97:5e:12:a6:3d:eb:38:10 was issued on by Let's Encrypt.

With 86 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=trfu.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:47:76:68:8e:fd:2c:05:69:88:97:5e:12:a6:3d:eb:38:10
Serial Number (int): 285654297649203791258922771979020911982608
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 70:6e:ed:91:66:93:6e:b9:e2:05:50:89:6b:69:d4:84:5f:b3:f8:d9
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 98:e1:48:93:10:14:cc:da:ef:1e:54:ac:a3:27:09:0c:9a:e0:c3:0f
Fingerprint (sha256): fb:f4:29:09:a2:d4:be:e3:6e:1d:c9:85:6e:6d:75:b1:b7:dc:7b:18:6b:63:a4:27:ff:a6:24:6f:06:02:f5:3f

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate trfu.co.nz

86

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for trfu.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

amdg.org.nz
aucklandleague.co.nz
avalonrugby.co.nz
badminton.org.nz
bayofislandsdressagegroup.co.nz
blokarthb.co.nz
bluerovers.co.nz
bowlsbop.co.nz
brownsbaybowls.org.nz
burnsiderugby.co.nz
canterburycountrycricket.co.nz
canterburyunited.co.nz
capitalbaseball.co.nz
cathcollege.school.nz
chchfootballsquash.co.nz
christchurchmetrocricket.co.nz
christchurchmetrocricket.com
christchurchmetrocricket.nz
christchurchmetrocricket.org
christchurchmetrocricket.org.nz
clubsnzdarts.co.nz
darfieldcricket.co.nz
darfieldrugby.co.nz
dunedinnetball.co.nz
eastcoastexpo.co.nz
frasertechcricket.nz
havelockski.org.nz
hawkesbayfarmersmarket.co.nz
hawkesbaysquash.co.nz
hbbct.org.nz
hbbusinesshub.co.nz
hbbusinesshub.nz
hnhs.school.nz
hni.school.nz
hnwafc.org.nz
hockeymanawatu.org.nz
hockeywairarapa.org.nz
hsobburnside.co.nz
kapitigymsports.co.nz
kapitisoftball.co.nz
kaumatuatc.org.nz
kerikerimtbclub.co.nz
lincolnbowlingclub.co.nz
maristalbion.co.nz
maristinvercargill.co.nz
marlinsnetball.co.nz
mcobsquash.co.nz
mooloo.co.nz
mooloocommunityrugby.co.nz
moonshinetrail.co.nz
mpcricket.org.nz
netballwaitakere.co.nz
northharbourwaterpolo.co.nz
otta.org.nz
otumoetaifootball.co.nz
papakuranetball.nz
pauanuilifeguards.org.nz
pkjsports.co.nz
playsoftball.co.nz
prebbletonfootball.co.nz
primarysportscanterbury.org.nz
pukekohesoftball.co.nz
rowandale.school.nz
royaloakbowls.co.nz
rugby-foundation.org.nz
rugbyfoundation.co.nz
rugbyfoundation.com
rugbyfoundation.nz
sailhbc.org.nz
sasfootball.club
sasfootball.org.nz
sharkssports.co.nz
silverdalerugby.co.nz
storans.school.nz
sumnerbowls.co.nz
takapunarugby.co.nz
taupohockey.co.nz
ths.school.nz
touchnz.co.nz
touchnz.nz
trfu.co.nz
wahinetoamcc.nz
whangareibridgeclub.co.nz
worldpowerlifting.nz
wsra.nz
zephyr.org.nz

Other certificates including the domain name trfu.co.nz

(limited to 100 certificates)
www.sportsground.com
amdg.org.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
sporty.co.nz
sporty.co.nz
squashauckland.org.nz
sporty.co.nz
sporty.co.nz
www.sportsground.com
www.akaranacityrifleclub.co.nz
sporty.co.nz
www.cyclingsc.co.nz
www.marlboroughtrampingclub.co.nz
sporty.co.nz
sporty.co.nz
www.membermanager.co.nz
www.membermanager.co.nz
www.pukekohesoftball.co.nz
sporty.co.nz
www.eden.rugby
amdg.org.nz
sporty.co.nz
sporty.co.nz
belmontparkbowlingclub.co.nz
www.christchurchmetrocricket.co.nz
www.crossrecreationcentre.co.nz
www.marlinsnetball.co.nz
sporty.co.nz
sporty.co.nz
trfu.co.nz

Certificate

The complete raw certificate details for trfu.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcNUlxqpIDEnxJv8hOzt
UYK2a3SoWnQIYi4sqeaUaOkUVa/YpsNFSwXoEg2yhSocrvlDisI1hnQfs0SxnJn8
Ch5RssrWRDFM+htw6q4Z+lEGhxFVir6EPHl2mCqLHPX9+m5/Z8lzYitPyP5Hloo+
PocpY1GL8E/GqVFKRKx4hdYIumeV0DcWaHfep1aROh/ByzG1xcVG3VLG2dGCK25M
NPKVbHO0rnVWvaBDwRqnv8pvRuY8OVFbkML3J4TRTfrLGro15P1j8GWiXwo26MIR
bPbUR2w5dWUzBQcvTiXQV5bufQ39YnR7vuT8xlEaeX6ppEZJFQbeltkC1+J/2yH/
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 285654297649203791258922771979020911982608
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-28 20:39:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 20:39:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'trfu.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22945454224151912350309231073394880157491818595023576596324164413359195176294257746173876061961080120463509022510124381661045964744181940845146684903429436527683292855661546040418952324682292015188734821680644911269145031034274421650248486542549633097076291193813723230322243650640237462409703792246463037036692108319248894937437834723272115604386886923973541809167559368660989466528997810025715006684781076875366654049064778536368043451190390326005076922545659169395221167440531920617113463729321121511355542521230423625771900138923194490583044559545772211133156959344464349944659271221669504924662042115414033563587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							706eed9166936eb9e20550896b69d4845fb3f8d9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1841 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amdg.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandleague.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avalonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'badminton.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayofislandsdressagegroup.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blokarthb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluerovers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brownsbaybowls.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'burnsiderugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburycountrycricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canterburyunited.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capitalbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cathcollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chchfootballsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christchurchmetrocricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubsnzdarts.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darfieldrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunedinnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eastcoastexpo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frasertechcricket.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'havelockski.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbayfarmersmarket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hawkesbaysquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbct.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hbbusinesshub.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnhs.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hni.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hnwafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeymanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hockeywairarapa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsobburnside.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitigymsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kapitisoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaumatuatc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kerikerimtbclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lincolnbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristalbion.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maristinvercargill.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlinsnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcobsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mooloocommunityrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moonshinetrail.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpcricket.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballwaitakere.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'northharbourwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otta.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otumoetaifootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papakuranetball.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauanuilifeguards.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pkjsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'playsoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prebbletonfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primarysportscanterbury.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pukekohesoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rowandale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugby-foundation.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbyfoundation.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sailhbc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.club'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sasfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharkssports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'silverdalerugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storans.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sumnerbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'takapunarugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taupohockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ths.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchnz.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trfu.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wahinetoamcc.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareibridgeclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worldpowerlifting.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wsra.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zephyr.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001675c42f868000004030047304502210080cfe8053473f95b68016777f9e8b1f05e3725ab6ec092c38d346bfe46a1fdd902207023e58655585de18e15dc546e1b7de356b2e43fb697f88e08cca26a2da797cd00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001675c42f8690000040300483046022100e731c4fa898d44bf57373d3e762c15f1086b404365cff96c25281954ac5e7db7022100a2de3977f4ab29c625e05b69262a2ba51a3bcc53fac5cfb53e14c0cb0ee86f44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0084ecb1acd356fc8df335ab9862a6dc67b13f01259c4023602c87a87e1dff0b7727b358acebd960b603095a1f672b77fcf14e88025e108c7d1f6377948e7f20ceeb4cd8d02843e0f745172d029b4bdbb83aa49c177098820bb6503356644ee312217598f63b941c38f4ad438c31291779fddbd262300cf64e535c02d3832d982365a9443225d4ad311938b7ba87f5d64e3f0805014a1b6ea751bb4de0919d5bc0c8aef6a8e405c651f7d6cc6c125edbb1c31d45309dca129058967a0184f79204d58ec2bf2a6121d8f85df4b97345ca22f102d5bbe72afe7d783de041fbd9e69eace1fabb81c8d919e4c1cba56a2373158a25e09d2a58a3e7ff834f262daee9c1