sportsground.co.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:72:ac:15:f6:ef:fb:ac:dc:09:99:44:30:f3:6f:b8:0a:c3 was issued on by Let's Encrypt.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sportsground.co.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:72:ac:15:f6:ef:fb:ac:dc:09:99:44:30:f3:6f:b8:0a:c3
Serial Number (int): 300357788886262942587239980947953147185859
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e3:0b:3b:93:83:c8:24:50:08:b5:46:39:36:bd:82:f1:03:a1:18:af
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 53:1d:fd:1e:d8:83:49:f8:89:1d:55:f9:6a:07:38:bc:bf:07:10:22
Fingerprint (sha256): fd:4a:bd:89:5d:1c:94:19:56:e4:9f:1d:7f:46:bb:82:72:51:12:5a:cf:8e:fb:ee:4f:1f:2e:ef:61:79:45:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate sportsground.co.nz

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sportsground.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

athleticswanganui.co.nz
aucklandbaseball.co.nz
aucklandfootball.org.nz
aucklandservicerifle.org.nz
baseballnewzealand.co.nz
baseballnewzealand.com
baseballnewzealand.org
baseballnz.com
bowlsdunedin.co.nz
bowlstaurangasouth.co.nz
bowlswestcoast.org.nz
businesshawkesbay.co.nz
centralfootball.co.nz
centralfootball.org.nz
collegerifles.co.nz
countiesbadminton.co.nz
dairyflattennis.co.nz
developyourlegacy.co.nz
diamondblacks.co.nz
diamondblacks.com
diamondblacks.org.nz
diamondsport.co.nz
diamondsportnz.co.nz
diamondsportnz.com
diamondsports.co.nz
diamondsportsnz.co.nz
diamondsportsnz.com
footballsouth.co.nz
gameoftwohalfwits.com
ghryc.co.nz
glenfieldbowls.co.nz
hcwaterpolo.co.nz
hendersonsquash.co.nz
howicksailingclub.co.nz
hrc.org.nz
keirunga.org.nz
kereru.school.nz
ladiessocialcycling.org.nz
linfield.co.nz
linwoodrugby.co.nz
linwoodrugby.com
lynnavon.org.nz
makikihi.school.nz
manurewamets.co.nz
maoribasketball.co.nz
marlborough-touch.co.nz
mmcc.co.nz
motuekatouch.co.nz
mountfortwaterpolo.nz
myfootball.co.nz
mysoftball.co.nz
netballmanurewa.org.nz
newzealandbaseball.co.nz
nhbmx.org.nz
nscbaseball.co.nz
nzsra.org.nz
opotikicol.school.nz
poolburn.school.nz
rosegardenscroquetclub.org.nz
royaloakracquets.co.nz
rugbysouthland.co.nz
rugbysouthlandreferees.co.nz
runwalkseries.co.nz
softballauckland.org.nz
southcanterburybasketball.co.nz
southernrugby.co.nz
southlandbmxclub.co.nz
southlandfestivalofrunning.co.nz
sportsground.co.nz
tearohagolfclub.co.nz
teeball.co.nz
tennismanawatu.org.nz
touchsouthland.co.nz
ulyssesnelson.org.nz
upperhuttrifleclub.co.nz
waikaregolfclub.co.nz
wairarapacarclub.org.nz
waitematarowing.org.nz
wellingtonbaseball.co.nz
wellingtonbaseballassociation.co.nz
westaucklandafc.co.nz
whangamatasurf.co.nz
whangareirowingclub.org.nz
whangaroasportfishingclub.co.nz
woolstonparkindoorbowls.org.nz

Other certificates including the domain name sportsground.co.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
sporty.co.nz
waibopfootball.co.nz
www.sportsground.co.nz
sportsground.co.nz
sporty.co.nz
www.katikatifc.co.nz
pcbasketballclub.co.nz
www.sportsground.co.nz
www.sportsground.co.nz
pcbasketballclub.co.nz
www.pkjsports.co.nz
sporty.co.nz
keirunga.org.nz
karakasportspark.co.nz
www.waitakerecityfc.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
www.sportsground.com
maristinvercargill.co.nz
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
www.thesalmonrun.nz
sporty.co.nz
www.schoolground.nz
maristinvercargill.co.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
www.unimountafc.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for sportsground.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMyjCCC7KgAwIBAgISA3KsFfbv+6zcCZlEMPNvuArDMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAzMjcwMjU5MThaFw0x
OTA2MjUwMjU5MThaMB0xGzAZBgNVBAMTEnNwb3J0c2dyb3VuZC5jby5uejCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALh1BsBlO1QpzOCdC63zYvoY2js2
5PHPKJr1s54ybq1mapGqZFGP2oS8Alo7MQbegG8y/5STmG2wzKGyAWeQPVV889bi
hJebuFNCE7E9eqbFPzJ2kf3IppBj98MBTynpCraBNqVIFxknbw3R7GEOQQLdVsTG
OCn1HL6HNLhIJgTTINXyJGXYIlTDFHvqOHuuvpIx3F9qT3xWw0/4Uhn9tF1Qt9LC
8WN8oUMO1ci+JV9SYZXOVaAOauZZPaApcqu4jc3AChmZiIz5FADqGcbIdhIUqipf
hAbF4MfW/FRjezOH8oESo9E/ghihl6XkTW4k6E83GNxwHP44jxpvmkI6wFcCAwEA
AaOCCdUwggnRMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU4ws7k4PIJFAItUY5Nr2C
8QOhGK8wHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl7/Oo7KEwbwYIKwYBBQUH
AQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5pbnQteDMubGV0c2VuY3J5
cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5pbnQteDMubGV0c2VuY3J5
cHQub3JnLzCCB4kGA1UdEQSCB4Awggd8ghdhdGhsZXRpY3N3YW5nYW51aS5jby5u
eoIWYXVja2xhbmRiYXNlYmFsbC5jby5ueoIXYXVja2xhbmRmb290YmFsbC5vcmcu
bnqCG2F1Y2tsYW5kc2VydmljZXJpZmxlLm9yZy5ueoIYYmFzZWJhbGxuZXd6ZWFs
YW5kLmNvLm56ghZiYXNlYmFsbG5ld3plYWxhbmQuY29tghZiYXNlYmFsbG5ld3pl
YWxhbmQub3Jngg5iYXNlYmFsbG56LmNvbYISYm93bHNkdW5lZGluLmNvLm56ghhi
b3dsc3RhdXJhbmdhc291dGguY28ubnqCFWJvd2xzd2VzdGNvYXN0Lm9yZy5ueoIX
YnVzaW5lc3NoYXdrZXNiYXkuY28ubnqCFWNlbnRyYWxmb290YmFsbC5jby5ueoIW
Y2VudHJhbGZvb3RiYWxsLm9yZy5ueoITY29sbGVnZXJpZmxlcy5jby5ueoIXY291
bnRpZXNiYWRtaW50b24uY28ubnqCFWRhaXJ5ZmxhdHRlbm5pcy5jby5ueoIXZGV2
ZWxvcHlvdXJsZWdhY3kuY28ubnqCE2RpYW1vbmRibGFja3MuY28ubnqCEWRpYW1v
bmRibGFja3MuY29tghRkaWFtb25kYmxhY2tzLm9yZy5ueoISZGlhbW9uZHNwb3J0
LmNvLm56ghRkaWFtb25kc3BvcnRuei5jby5ueoISZGlhbW9uZHNwb3J0bnouY29t
ghNkaWFtb25kc3BvcnRzLmNvLm56ghVkaWFtb25kc3BvcnRzbnouY28ubnqCE2Rp
YW1vbmRzcG9ydHNuei5jb22CE2Zvb3RiYWxsc291dGguY28ubnqCFWdhbWVvZnR3
b2hhbGZ3aXRzLmNvbYILZ2hyeWMuY28ubnqCFGdsZW5maWVsZGJvd2xzLmNvLm56
ghFoY3dhdGVycG9sby5jby5ueoIVaGVuZGVyc29uc3F1YXNoLmNvLm56ghdob3dp
Y2tzYWlsaW5nY2x1Yi5jby5ueoIKaHJjLm9yZy5ueoIPa2VpcnVuZ2Eub3JnLm56
ghBrZXJlcnUuc2Nob29sLm56ghpsYWRpZXNzb2NpYWxjeWNsaW5nLm9yZy5ueoIO
bGluZmllbGQuY28ubnqCEmxpbndvb2RydWdieS5jby5ueoIQbGlud29vZHJ1Z2J5
LmNvbYIPbHlubmF2b24ub3JnLm56ghJtYWtpa2loaS5zY2hvb2wubnqCEm1hbnVy
ZXdhbWV0cy5jby5ueoIVbWFvcmliYXNrZXRiYWxsLmNvLm56ghdtYXJsYm9yb3Vn
aC10b3VjaC5jby5ueoIKbW1jYy5jby5ueoISbW90dWVrYXRvdWNoLmNvLm56ghVt
b3VudGZvcnR3YXRlcnBvbG8ubnqCEG15Zm9vdGJhbGwuY28ubnqCEG15c29mdGJh
bGwuY28ubnqCFm5ldGJhbGxtYW51cmV3YS5vcmcubnqCGG5ld3plYWxhbmRiYXNl
YmFsbC5jby5ueoIMbmhibXgub3JnLm56ghFuc2NiYXNlYmFsbC5jby5ueoIMbnpz
cmEub3JnLm56ghRvcG90aWtpY29sLnNjaG9vbC5ueoIScG9vbGJ1cm4uc2Nob29s
Lm56gh1yb3NlZ2FyZGVuc2Nyb3F1ZXRjbHViLm9yZy5ueoIWcm95YWxvYWtyYWNx
dWV0cy5jby5ueoIUcnVnYnlzb3V0aGxhbmQuY28ubnqCHHJ1Z2J5c291dGhsYW5k
cmVmZXJlZXMuY28ubnqCE3J1bndhbGtzZXJpZXMuY28ubnqCF3NvZnRiYWxsYXVj
a2xhbmQub3JnLm56gh9zb3V0aGNhbnRlcmJ1cnliYXNrZXRiYWxsLmNvLm56ghNz
b3V0aGVybnJ1Z2J5LmNvLm56ghZzb3V0aGxhbmRibXhjbHViLmNvLm56giBzb3V0
aGxhbmRmZXN0aXZhbG9mcnVubmluZy5jby5ueoISc3BvcnRzZ3JvdW5kLmNvLm56
ghV0ZWFyb2hhZ29sZmNsdWIuY28ubnqCDXRlZWJhbGwuY28ubnqCFXRlbm5pc21h
bmF3YXR1Lm9yZy5ueoIUdG91Y2hzb3V0aGxhbmQuY28ubnqCFHVseXNzZXNuZWxz
b24ub3JnLm56ghh1cHBlcmh1dHRyaWZsZWNsdWIuY28ubnqCFXdhaWthcmVnb2xm
Y2x1Yi5jby5ueoIXd2FpcmFyYXBhY2FyY2x1Yi5vcmcubnqCFndhaXRlbWF0YXJv
d2luZy5vcmcubnqCGHdlbGxpbmd0b25iYXNlYmFsbC5jby5ueoIjd2VsbGluZ3Rv
bmJhc2ViYWxsYXNzb2NpYXRpb24uY28ubnqCFXdlc3RhdWNrbGFuZGFmYy5jby5u
eoIUd2hhbmdhbWF0YXN1cmYuY28ubnqCGndoYW5nYXJlaXJvd2luZ2NsdWIub3Jn
Lm56gh93aGFuZ2Fyb2FzcG9ydGZpc2hpbmdjbHViLmNvLm56gh53b29sc3RvbnBh
cmtpbmRvb3Jib3dscy5vcmcubnowTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYB
BAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5v
cmcwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgB0ftqDMa0zEJEhnM4lT0Jwwr/9
XkIgCMY3NXnmEHvMVgAAAWm9TWKzAAAEAwBHMEUCIDyFXEC3MLvb1badseOLnTgL
x6uc3FSlKiDAwKsMR3DFAiEAoQXFxZtw+CDNQN4G9TSx4r7V8tgPVgBbFNATvpfZ
zC4AdgBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWm9TWDFAAAE
AwBHMEUCIDjeiUMG5UbYh9puBupaiHb8b8OJM8dpBcPqhMNM1TBCAiEAvElHv2UT
3nkodYKBXZ/eqhINLGktUU20Kx52gOfKbHgwDQYJKoZIhvcNAQELBQADggEBAC6W
Xpp+KwMvfICqFyLJQiDffSNXVcuq0JSdmhCVWn1lolqzbJpFhOZpRR/Rkvvhzcy+
0QKC4q29QPAeEBhIz1FKr/bS8LizQLCwOifIFoHzHdRhcdh8X1dMHq0WSNq8dc8O
d7OB9qBvhDdqfr+T824Ktxo6Cx8P9rPsc9f7RYD9U4tIU+QPtQPqvpc42JvjaiVO
9DcKbgvk57f43wvjyTAP3KSCN1gy5oTUCLnPIpixct5TNCW6CVhAuRsGeRvvtH8a
9w17ryfrDMRAOwXD5dMhaAsJE60sSqa8frN8XWfxiVT6oPrrMI4qYEq5q0ApbmsQ
ueyx18UAlLt1hO3TaU0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHUGwGU7VCnM4J0LrfNi
+hjaOzbk8c8omvWznjJurWZqkapkUY/ahLwCWjsxBt6AbzL/lJOYbbDMobIBZ5A9
VXzz1uKEl5u4U0ITsT16psU/MnaR/cimkGP3wwFPKekKtoE2pUgXGSdvDdHsYQ5B
At1WxMY4KfUcvoc0uEgmBNMg1fIkZdgiVMMUe+o4e66+kjHcX2pPfFbDT/hSGf20
XVC30sLxY3yhQw7VyL4lX1Jhlc5VoA5q5lk9oClyq7iNzcAKGZmIjPkUAOoZxsh2
EhSqKl+EBsXgx9b8VGN7M4fygRKj0T+CGKGXpeRNbiToTzcY3HAc/jiPGm+aQjrA
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300357788886262942587239980947953147185859
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 02:59:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-25 02:59:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sportsground.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23285555969191476741453890378957544338428654483758583435224816415992046533689626740759130600351799900684756457862034998761283229847548288924853244969857668021206902180584394845088957465654046183289616565115899964586875511453837241330566258165658067029151075341154956898958820626001766604043910534366007131963928731449004568765282883697390202548768043307175682028673952352189215359799348017061107765854067836692340774645536851788246923061016251628496257787124938167280156062819539119391138812133021317070962171487940843086794073928820948015259572960389710654484775169961634578837881960471244721007126246573632088883287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e30b3b9383c8245008b5463936bd82f103a118af
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1920 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlsdunedin.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businesshawkesbay.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'countiesbadminton.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dairyflattennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ghryc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lynnavon.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysoftball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netballmanurewa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opotikicol.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poolburn.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'westaucklandafc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangamatasurf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169bd4d62b3000004030047304502203c855c40b730bbdbd5b69db1e38b9d380bc7ab9cdc54a52a20c0c0ab0c4770c5022100a105c5c59b70f820cd40de06f534b1e2bed5f2d80f56005b14d013be97d9cc2e00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169bd4d60c50000040300473045022038de894306e546d887da6e06ea5a8876fc6fc38933c76905c3ea84c34cd53042022100bc4947bf6513de79287582815d9fdeaa120d2c692d514db42b1e7680e7ca6c78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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