www.schoolground.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f1:f4:cf:e0:fe:66:30:bb:fe:a6:4b:86:5d:78:14:36:0d was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.schoolground.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f1:f4:cf:e0:fe:66:30:bb:fe:a6:4b:86:5d:78:14:36:0d
Serial Number (int): 343670319223063476700671037156572878091789
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:87:2e:59:0c:62:c1:7d:1a:89:9c:46:69:2d:74:70:98:73:63:df
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 14:ee:bf:9b:dd:2d:17:84:93:ec:75:b6:ad:33:f2:65:3a:d8:27:0e
Fingerprint (sha256): ff:94:b3:e4:86:6f:30:0f:e1:cb:0f:cb:fc:5d:6f:3a:ff:9b:14:5c:93:72:92:da:7d:ec:1f:8c:b0:40:3f:77

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.schoolground.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.schoolground.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.aafl.co.nz
www.actc.org.nz
www.acwpa.co.nz
www.aucklandmarist.co.nz
www.badmintonhb.co.nz
www.basketballtaranaki.co.nz
www.belmontparkbowlingclub.co.nz
www.blenheimgolfclub.co.nz
www.bluffhillbowls.co.nz
www.bowlswanganui.org.nz
www.bsgevents.co.nz
www.bullernetball.co.nz
www.bushmultisport.org.nz
www.canamju.org
www.canoeslalombop.co.nz
www.clevedoncricketclub.co.nz
www.clevedonrifleclub.co.nz
www.cmih.co.nz
www.edenrugby.co.nz
www.gisborneharriers.co.nz
www.glenburniceskatingclub.co.nz
www.halswellcricket.co.nz
www.hastings-central.school.nz
www.hbcommunityfitness.co.nz
www.hbcommunityfitness.org.nz
www.heet.net.nz
www.hillseekers.co.nz
www.hillseekers4wd.co.nz
www.lucknow.school.nz
www.marchingcanterbury.co.nz
www.mariancollege.school.nz
www.maristfc.co.nz
www.marlboroughtennis.co.nz
www.martinboroughsquash.co.nz
www.martinboroughtennisclub.co.nz
www.mchockey.co.nz
www.melrosetargetshooting.co.nz
www.mesoball.co.nz
www.mtwellingtonrugby.co.nz
www.mtwswim.co.nz
www.ncnc.org.nz
www.nelsoncarclub.co.nz
www.netballmanawatu.org.nz
www.netballsouthcanterbury.co.nz
www.northcoterugby.co.nz
www.northharbourtag.co.nz
www.nztua.com
www.oacnz.org
www.otagoindoorbowls.co.nz
www.otagotouch.co.nz
www.paparoa.school.nz
www.parkvale.school.nz
www.pcjcc.org.nz
www.pioneerbasketballclub.co.nz
www.prebbletonnetball.org.nz
www.primarysportwellington.org.nz
www.puhoisports.org.nz
www.rangitikeigolfclub.co.nz
www.schoolground.com
www.seatounafc.org.nz
www.shoreroversnetball.co.nz
www.southerntack.co.nz
www.southlandolympicweightlifting.co.nz
www.sportsground.com
www.stheliersbowlingclub.co.nz
www.stjos.school.nz
www.stjosephschb.school.nz
www.suburbsrugby.co.nz
www.sunrisecottage.co.nz
www.tabletennis.org.nz
www.taierirugby.co.nz
www.tasmanrugbyreferees.co.nz
www.teawamutusquash.co.nz
www.technicalharriers.co.nz
www.temata.school.nz
www.terracechb.school.nz
www.timarusquashclub.co.nz
www.trenthamrifleclub.co.nz
www.tuakauponyclub.co.nz
www.tutangiora.nz
www.ultrarunner.org.nz
www.valleyhockey.org.nz
www.volleyballbop.co.nz
www.waikatohockey.org.nz
www.wellingtonrnr.org.nz
www.wellingtontouch.org.nz
www.wellsfordsquashclub.co.nz
www.whtc.co.nz
www.wmsc.org.nz
www.wops.co.nz

Other certificates including the domain name schoolground.com

(limited to 100 certificates)
www.nelsoncarclub.co.nz
www.blenheimgolfclub.co.nz
sporty.co.nz
www.tabletennis.org.nz
sporty.co.nz
northcanterburyrugby.co.nz
www.nztua.com
www.schoolground.com
hastings-central.school.nz
ultrarunner.org.nz
www.oacnz.org
sporty.co.nz
aafl.co.nz
sporty.co.nz
sporty.co.nz
northharbourtag.co.nz
trenthamrifleclub.co.nz
sporty.co.nz
aucklandmarist.co.nz
www.wmsc.org.nz
lucknow.school.nz
www.badmintonhb.co.nz
pioneerbasketballclub.co.nz
www.melrosetargetshooting.co.nz
basketballtaranaki.co.nz
sporty.co.nz
www.schoolground.com

Certificate

The complete raw certificate details for www.schoolground.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxwoEYCx1/VuYV/9TmEWd
7wkoAre8HMdzfgQu6SewNddZ15IHOi2lT/5yUQy+X8Vi9wJiFPgLWvXwMXzAeiMx
DY6QHRhtPqyGZe9DLMnScH5DgonPDA+ZBfLBkU9kJoP/w1QAOeu9mJkxsMwAHWBM
gY4kRQ85aigdmGcHxBP3+/N2/3M4c+PihSQrIxEalaM02Fp3Evwftp3m8KzkPjG3
BRVNJMLsVrBWTZzaaDcZmCSCVRJg3dTEmcTdXl4HIegN204B6uVbDbZs/AGV1N6w
5DLwW8hXpn7HY2EhBbWZZUK/MH7abA6MkvQohzyKiMNYslfUoNPnC0UIIxEpkDDX
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 343670319223063476700671037156572878091789
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-26 11:00:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 11:00:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.schoolground.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25126362300656247163986135204577877822760853339060938744466203996179551471082034902141134043886374113816147268957706242777158679998481438647680001113557630856250560596139638409251812943615091929919200417804868529972275568740747007887566785811371251399746911507133066966909065412939491398513442946451336044995455595104358796055919732718348102359978935316813528751445100149506058530499023233613878463034242231906908744561167925722375132763826537519533612236616166144895305770615694834151176069736071724987024619829680126277876764647047571127229450779322827468989939532733040787566207420598330624419981380782423444346821
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6872e590c62c17d1a899c46692d7470987363df
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aafl.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acwpa.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aucklandmarist.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.badmintonhb.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basketballtaranaki.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belmontparkbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blenheimgolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bluffhillbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bowlswanganui.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bsgevents.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bullernetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bushmultisport.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canamju.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canoeslalombop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedoncricketclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clevedonrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cmih.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edenrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gisborneharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glenburniceskatingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.halswellcricket.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hastings-central.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbcommunityfitness.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.heet.net.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hillseekers4wd.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lucknow.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marchingcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mariancollege.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maristfc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marlboroughtennis.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughsquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinboroughtennisclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mchockey.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melrosetargetshooting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mesoball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwellingtonrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mtwswim.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ncnc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsoncarclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballmanawatu.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.netballsouthcanterbury.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northcoterugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.northharbourtag.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nztua.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oacnz.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagoindoorbowls.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.otagotouch.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paparoa.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkvale.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pcjcc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pioneerbasketballclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prebbletonnetball.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primarysportwellington.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.puhoisports.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rangitikeigolfclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schoolground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seatounafc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shoreroversnetball.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southerntack.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.southlandolympicweightlifting.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sportsground.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stheliersbowlingclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjos.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stjosephschb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suburbsrugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sunrisecottage.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tabletennis.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.taierirugby.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tasmanrugbyreferees.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teawamutusquash.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technicalharriers.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temata.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terracechb.school.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.timarusquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trenthamrifleclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tuakauponyclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tutangiora.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ultrarunner.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valleyhockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volleyballbop.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waikatohockey.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtonrnr.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellingtontouch.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellsfordsquashclub.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whtc.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wmsc.org.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wops.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000169b9dfe47f0000040300483046022100bfbba66548deef36e52f8d871f3cf92a4e40b09330f4024d2b12c8feb5bada3c022100a63961452ffdc5c598c2f34df40e925307a02f03f18b529d45d36fd003cc895200750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000169b9dfe5080000040300463044022014790b82e2cb04d788ac3cf066902ca9be869b3f480db896f5475dc96760db4b02202419332dbba88c3b7a2d72d5dae90a6561d81a4f927e5c303bcabca5ae0fc606
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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