www.bowlswestcoast.org.nz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:38:87:ba:37:02:e6:25:5e:68:9f:de:c4:6f:e8:1e:cf:f5 was issued on by Let's Encrypt.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bowlswestcoast.org.nz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:38:87:ba:37:02:e6:25:5e:68:9f:de:c4:6f:e8:1e:cf:f5
Serial Number (int): 280573083005262156268818664882898378608629
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:a9:81:ba:ff:f5:2c:aa:c1:ee:56:fb:56:43:8c:69:c5:1e:f4:06
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 2f:45:e7:5a:04:a5:3d:1b:fe:49:5d:2b:9a:1b:f5:55:ff:d4:a7:b5
Fingerprint (sha256): fe:e8:c1:68:8d:76:c2:fc:25:a7:9e:f7:f6:e0:e4:85:24:95:35:09:ee:11:7f:2e:1c:ec:ba:6d:a1:ee:70:52

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bowlswestcoast.org.nz

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bowlswestcoast.org.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aff.org.nz
www.athleticswanganui.co.nz
www.aucklandbaseball.co.nz
www.aucklandfootball.org.nz
www.aucklandservicerifle.org.nz
www.baseballnewzealand.co.nz
www.baseballnewzealand.com
www.baseballnewzealand.org
www.baseballnz.com
www.bowlstaurangasouth.co.nz
www.bowlswestcoast.org.nz
www.brooklyncroquetclub.org
www.centralfootball.co.nz
www.centralfootball.org.nz
www.cmsport.co.nz
www.collegerifles.co.nz
www.developyourlegacy.co.nz
www.diamondblacks.co.nz
www.diamondblacks.com
www.diamondblacks.org.nz
www.diamondsport.co.nz
www.diamondsportnz.co.nz
www.diamondsportnz.com
www.diamondsports.co.nz
www.diamondsportsnz.co.nz
www.diamondsportsnz.com
www.footballsouth.co.nz
www.gameoftwohalfwits.com
www.glenfieldbowls.co.nz
www.hbcc.org.nz
www.hcwaterpolo.co.nz
www.hendersonsquash.co.nz
www.howicksailingclub.co.nz
www.hpbaseball.co.nz
www.hphawks.co.nz
www.hphawks.com
www.hrc.org.nz
www.karakasportspark.co.nz
www.keirunga.org.nz
www.keirungaartists.org.nz
www.kereru.school.nz
www.ladiessocialcycling.org.nz
www.linfield.co.nz
www.linwoodrugby.co.nz
www.linwoodrugby.com
www.makikihi.school.nz
www.manurewamets.co.nz
www.maoribasketball.co.nz
www.marlborough-touch.co.nz
www.mmcc.co.nz
www.motuekatouch.co.nz
www.mountfortwaterpolo.nz
www.myfootball.co.nz
www.nelsonnetball.co.nz
www.newzealandbaseball.co.nz
www.nhbmx.org.nz
www.nscbaseball.co.nz
www.nzsra.org.nz
www.osa.org.nz
www.rosegardenscroquetclub.org.nz
www.royaloakracquets.co.nz
www.rugbysouthland.co.nz
www.rugbysouthlandreferees.co.nz
www.runwalkseries.co.nz
www.saintjosmatata.school.nz
www.softballauckland.org.nz
www.southcanterburybasketball.co.nz
www.southernrugby.co.nz
www.southlandbmxclub.co.nz
www.southlandfestivalofrunning.co.nz
www.sportsground.co.nz
www.tearohagolfclub.co.nz
www.teeball.co.nz
www.tennismanawatu.org.nz
www.touchsouthland.co.nz
www.turbotouch.org.nz
www.ulyssesnelson.org.nz
www.upperhuttrifleclub.co.nz
www.waihibeachtennisclub.co.nz
www.waihoraclaytarget.co.nz
www.waikaregolfclub.co.nz
www.wairarapacarclub.org.nz
www.waitematarowing.org.nz
www.wellingtonbaseball.co.nz
www.wellingtonbaseballassociation.co.nz
www.whangareirowingclub.org.nz
www.whangaroasportfishingclub.co.nz
www.woolstonparkindoorbowls.org.nz

Other certificates including the domain name bowlswestcoast.org.nz

(limited to 100 certificates)
oratiaunited.co.nz
sporty.co.nz
www.sportsground.com
waibopfootball.co.nz
www.katikatifc.co.nz
www.bowlswestcoast.org.nz
pcbasketballclub.co.nz
pcbasketballclub.co.nz
sporty.co.nz
www.turbotouch.org.nz
keirunga.org.nz
karakasportspark.co.nz
www.manurewamets.co.nz
www.waitakerecityfc.org.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
sportsground.co.nz
sportsground.co.nz
www.sportsground.com
www.aucklandsoftball.org.nz
sporty.co.nz
sporty.co.nz
www.brooklyncroquetclub.org
manurewamets.co.nz
sporty.co.nz
www.schoolground.nz
whangareirowingclub.org.nz
sporty.co.nz
sporty.co.nz
sporty.co.nz
keirunga.org.nz
www.greenhithefootball.org
sportsground.co.nz
www.bowlswestcoast.org.nz

Certificate

The complete raw certificate details for www.bowlswestcoast.org.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGaP4sZdITNdCW+jok+W
CGlGnVb0feNJnvxKUwNcUzZ949iZwzrze4/hdApoj1QDn6ez83JvlXibkAPZpaR5
2djMnTjYTgQzyCajHcPj52B+mM44Sxul6rgYLdKOcv48SxUwK7IxazqsE/BYBDm2
7d32EPFZQH83hmL01mpda6QchzkUNs6S+b2w9CNb3P1UHqPxRSfJsPXM+DS3QoeX
Up7Bk3Zl+z+J5EQ6C8zwjBJK2j4X3UclpHAy7GxD/Fd3qaYilD3R79eNxaqFIBY7
1NkplzpkMTlfSBnVJhvanJneDgMw++f4zuyBTJOpl5h09LTC+mFIJFo6tSZto7Ur
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280573083005262156268818664882898378608629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 02:23:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 02:23:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bowlswestcoast.org.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23783376567440652793472824191715350131033328570234593438284551575355201264446631506954146813007474933604785618275493856648327706494026718093628451013532506222723583619542440752637958954852309948360057574707275391820652701382785465335526546300176522826635051185488036445978852490255596007183021319206141647772626962937715868687104350812511220233686719855448041265999551928137796661423716510371250740200563580123899046575873827798756908673872978595925326632861327217180411170265005482152481557126584767208345680964855015948942356982301144358770741226985748317191786838724657431223444420942132139476003425023208451287817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caa981bafff52caac1ee56fb56438c69c51ef406
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2310 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aff.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.athleticswanganui.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandservicerifle.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnewzealand.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baseballnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlstaurangasouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswestcoast.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brooklyncroquetclub.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centralfootball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.collegerifles.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.developyourlegacy.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondblacks.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsport.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsports.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diamondsportsnz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.footballsouth.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gameoftwohalfwits.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenfieldbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcwaterpolo.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hendersonsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.howicksailingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hpbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hphawks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hrc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karakasportspark.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirunga.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keirungaartists.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kereru.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ladiessocialcycling.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linfield.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.linwoodrugby.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.makikihi.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.manurewamets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maoribasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlborough-touch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mmcc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motuekatouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mountfortwaterpolo.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfootball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsonnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newzealandbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhbmx.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nscbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nzsra.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.osa.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosegardenscroquetclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaloakracquets.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rugbysouthlandreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.runwalkseries.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saintjosmatata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.softballauckland.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southcanterburybasketball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southernrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandbmxclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandfestivalofrunning.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tearohagolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teeball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tennismanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.touchsouthland.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turbotouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ulyssesnelson.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upperhuttrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihibeachtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waihoraclaytarget.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikaregolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wairarapacarclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waitematarowing.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonbaseballassociation.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangareirowingclub.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whangaroasportfishingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woolstonparkindoorbowls.org.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe000001687de268a50000040300483046022100e67a0019a83d4967a382e46f7921faf5a2aae6f0ed3ac42eb45289f84bcc8381022100a63d0acfcd8c4a150d69a7aeb1ea12564118528c92ca9a65dd6b4ab63fd70f9600750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001687de266b00000040300463044022071dc417335b2eff90df80ae4a891e043201cf34a1c36c04880681b4aba0525cb022061df9499762b36270c66dc497378957cb32ef9be5685416210ace9a238bafe87
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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