secure.switchfly.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 6b:fb:fd:b6:7d:d1:64:50:54:a3:3c:fb:1d:64:cb:08 was issued on by COMODO CA Limited.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.switchfly.com,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 6b:fb:fd:b6:7d:d1:64:50:54:a3:3c:fb:1d:64:cb:08
Serial Number (int): 143535807968572307046649400027219544840
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: dc:1c:f0:f7:c5:df:ea:b5:8c:ae:3b:84:3e:26:c0:4b:c3:10:0c:86
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): b4:61:c7:e2:92:2e:71:5c:1d:fa:88:9a:62:79:bb:e1:ba:da:6c:6d
Fingerprint (sha256): 09:db:5d:55:c0:58:f3:b9:14:ad:47:e9:9a:0c:86:f8:75:70:04:6a:24:d2:b3:dc:de:27:ac:92:29:65:7d:10

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate secure.switchfly.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.switchfly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.switchfly.com
adm.royalorchidholidays.com
aereo.tamembarqueja.com.br
agent.aavacations.com
agents.i-compare.co.nz
air.useaamiles.com
amhols.americanholidays.com
aviosandmoney.iberia.com
b2b.tamviagens.com.br
b2bmastercard.tamviagens.com.br
b2c.tamviagens.com.br
belfast.americanholidays.com
book.aavacations.com
booking.easytahiti.com
booking.norwegianholidays.com
bookings.americanholidays.com
bookingsuk.americanholidays.com
carawards.mileageplus.com
carhotel.useaamiles.com
carsanywhere.ihg.com
collectonhotelscarsandmore.avios.com
collectonhotelscarsandmore.ba.com
flight-hotel.westjet.com
flighthotel.westjet.com
flightsanywhere.ihg.com
hotelplanner.aavacations.com
hotelsanywhere.ihg.com
hotelscarsandmore.avios.com
marriott.atlantisbahamas.com
partner.royalorchidholidays.com
reservacorporativo.clubpremier.com
reservations.clubpremier.com
roh.royalorchidholidays.com
secure.atlantisbahamas.com
secure.myatlantisvacation.com
servicoturisticos.tamembarqueja.com.br
surpreenda.tamviagens.com.br
travellatampass.lan.com
travelmarketplace.delta.com
wine.avios.com
www.airandcar.espanol.marriott.com
www.airandcar.marriott.co.jp
www.airandcar.marriott.co.uk
www.airandcar.marriott.com
www.airandcar.marriott.com.au
www.airandcar.marriott.com.cn
www.airandcar.marriott.de
www.airandcar.marriott.fr
www.airandcar.marriott.it
www.airandcar.marriott.pt
www.fctgquicksearch.com
www.hotelsandcars.ba.com
www.i-compare.co.nz
www.infinityindustrypartners.com.au
www.marriottrewardsairandcar.com.cn
www.royalorchidholidays.com
www.wine.ba.com

Other certificates including the domain name switchfly.com

(limited to 100 certificates)
*.switchfly.com
*.switchfly.com
*.v184test.switchfly.com
*.v201test.switchfly.com
*.switchfly.com
secure.switchfly.com
switchfly.com
secure.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v195test.switchfly.com
secure.switchfly.com
*.testjack2.core-test.switchfly.com
*.staging.switchfly.com
*.switchfly.com
*.v192test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.qa3.switchfly.com
atlantispi.switchfly.com
switchfly.com
secure.switchfly.com
*.v143test.switchfly.com
secure.switchfly.com
*.switchfly.com
secure.switchfly.com
*.v193test.switchfly.com
secure.switchfly.com
*.v172test.switchfly.com
ancillary.switchfly.com
*.staging.switchfly.com
ds-operations.ds.core-test.switchfly.com
analytics.switchfly.com
*.v183test.switchfly.com
b2b.tamviagens.com.br
*.v195test.switchfly.com
switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.v192test.switchfly.com
*.v193test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.aws-internal.switchfly.com
*.switchfly.com
secure.switchfly.com
*.qa1.switchfly.com
*.v185test.switchfly.com
employee.switchfly.com
*.v162test.switchfly.com
www.switchfly.com
secure.switchfly.com
*.v194test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.v175test.switchfly.com
*.switchfly.com
*.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v154test.switchfly.com
*.v194test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.v163test.switchfly.com
*.uat.switchfly.com
*.switchfly.com
ancillary.switchfly.com
britishairways.switchfly.com
switchfly.com
*.v165test.switchfly.com
secure.switchfly.com
*.v192test.switchfly.com
*.switchfly.com
*.v181test.switchfly.com
*.aws.switchfly.com
www.switchfly.com
*.staging.switchfly.com
*.v164test.switchfly.com
*.uat.switchfly.com
americanexpress.switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.v151test.switchfly.com
switchfly.com
ancillary.switchfly.com
*.v121test.switchfly.com
*.switchfly.com
*.uat.switchfly.com
secure.switchfly.com
*.v182test.switchfly.com
*.v191test.switchfly.com
*.switchfly.com
secure.switchfly.com
pwp-uat.client.switchfly.com

Certificate

The complete raw certificate details for secure.switchfly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMkzCCC3ugAwIBAgIQa/v9tn3RZFBUozz7HWTLCDANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxNjA0BgNV
BAMTLUNPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QTAeFw0xODExMDcwMDAwMDBaFw0xOTA5MDYyMzU5NTlaMG4xITAfBgNVBAsTGERv
bWFpbiBDb250cm9sIFZhbGlkYXRlZDEqMCgGA1UECxMhQ09NT0RPIFNTTCBVbmlm
aWVkIENvbW11bmljYXRpb25zMR0wGwYDVQQDExRzZWN1cmUuc3dpdGNoZmx5LmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOM2fOMtjMB+I4aeCLuG
u/spZd01nwtqBAhnCtTzBzWIlHLz+ma+z7BgsMqw5Hl+dFU84A0T+BAEG+YQovfX
2Q825etanyZfHQJVXUmgXJvuOFIcgml2jD1emEKgB/LXTj6BhtT9VGjveD6YP6g/
cncgh6hELvt7S+SVu/M3itG68LsJgwO0HZRd8hRsSeSkfX/TzlXp6Tlo2gMxc7h3
1qsnvlHbCMpWXja52wDDpe2CSul0GBPObCfMMSuWZ2UKswL+rgEf84Ms5WjaSBVh
m93dbkXmNCSoDiGvT/ZVKyCos916TWdxDJwEH2o9RDvzQnyuyJ4v4r03H6AnLfa8
VGsCAwEAAaOCCQgwggkEMB8GA1UdIwQYMBaAFJCvajqUWgvYkOoSVnPfQ7Q6KNrn
MB0GA1UdDgQWBBTcHPD3xd/qtYyuO4Q+JsBLwxAMhjAOBgNVHQ8BAf8EBAMCBaAw
DAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTwYD
VR0gBEgwRjA6BgsrBgEEAbIxAQICBzArMCkGCCsGAQUFBwIBFh1odHRwczovL3Nl
Y3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgEwVAYDVR0fBE0wSzBJoEegRYZD
aHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBRG9tYWluVmFsaWRhdGlv
blNlY3VyZVNlcnZlckNBLmNybDCBhQYIKwYBBQUHAQEEeTB3ME8GCCsGAQUFBzAC
hkNodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FEb21haW5WYWxpZGF0
aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5j
b21vZG9jYS5jb20wggZNBgNVHREEggZEMIIGQIIUc2VjdXJlLnN3aXRjaGZseS5j
b22CG2FkbS5yb3lhbG9yY2hpZGhvbGlkYXlzLmNvbYIaYWVyZW8udGFtZW1iYXJx
dWVqYS5jb20uYnKCFWFnZW50LmFhdmFjYXRpb25zLmNvbYIWYWdlbnRzLmktY29t
cGFyZS5jby5ueoISYWlyLnVzZWFhbWlsZXMuY29tghthbWhvbHMuYW1lcmljYW5o
b2xpZGF5cy5jb22CGGF2aW9zYW5kbW9uZXkuaWJlcmlhLmNvbYIVYjJiLnRhbXZp
YWdlbnMuY29tLmJygh9iMmJtYXN0ZXJjYXJkLnRhbXZpYWdlbnMuY29tLmJyghVi
MmMudGFtdmlhZ2Vucy5jb20uYnKCHGJlbGZhc3QuYW1lcmljYW5ob2xpZGF5cy5j
b22CFGJvb2suYWF2YWNhdGlvbnMuY29tghZib29raW5nLmVhc3l0YWhpdGkuY29t
gh1ib29raW5nLm5vcndlZ2lhbmhvbGlkYXlzLmNvbYIdYm9va2luZ3MuYW1lcmlj
YW5ob2xpZGF5cy5jb22CH2Jvb2tpbmdzdWsuYW1lcmljYW5ob2xpZGF5cy5jb22C
GWNhcmF3YXJkcy5taWxlYWdlcGx1cy5jb22CF2NhcmhvdGVsLnVzZWFhbWlsZXMu
Y29tghRjYXJzYW55d2hlcmUuaWhnLmNvbYIkY29sbGVjdG9uaG90ZWxzY2Fyc2Fu
ZG1vcmUuYXZpb3MuY29tgiFjb2xsZWN0b25ob3RlbHNjYXJzYW5kbW9yZS5iYS5j
b22CGGZsaWdodC1ob3RlbC53ZXN0amV0LmNvbYIXZmxpZ2h0aG90ZWwud2VzdGpl
dC5jb22CF2ZsaWdodHNhbnl3aGVyZS5paGcuY29tghxob3RlbHBsYW5uZXIuYWF2
YWNhdGlvbnMuY29tghZob3RlbHNhbnl3aGVyZS5paGcuY29tghtob3RlbHNjYXJz
YW5kbW9yZS5hdmlvcy5jb22CHG1hcnJpb3R0LmF0bGFudGlzYmFoYW1hcy5jb22C
H3BhcnRuZXIucm95YWxvcmNoaWRob2xpZGF5cy5jb22CInJlc2VydmFjb3Jwb3Jh
dGl2by5jbHVicHJlbWllci5jb22CHHJlc2VydmF0aW9ucy5jbHVicHJlbWllci5j
b22CG3JvaC5yb3lhbG9yY2hpZGhvbGlkYXlzLmNvbYIac2VjdXJlLmF0bGFudGlz
YmFoYW1hcy5jb22CHXNlY3VyZS5teWF0bGFudGlzdmFjYXRpb24uY29tgiZzZXJ2
aWNvdHVyaXN0aWNvcy50YW1lbWJhcnF1ZWphLmNvbS5icoIcc3VycHJlZW5kYS50
YW12aWFnZW5zLmNvbS5icoIXdHJhdmVsbGF0YW1wYXNzLmxhbi5jb22CG3RyYXZl
bG1hcmtldHBsYWNlLmRlbHRhLmNvbYIOd2luZS5hdmlvcy5jb22CInd3dy5haXJh
bmRjYXIuZXNwYW5vbC5tYXJyaW90dC5jb22CHHd3dy5haXJhbmRjYXIubWFycmlv
dHQuY28uanCCHHd3dy5haXJhbmRjYXIubWFycmlvdHQuY28udWuCGnd3dy5haXJh
bmRjYXIubWFycmlvdHQuY29tgh13d3cuYWlyYW5kY2FyLm1hcnJpb3R0LmNvbS5h
dYIdd3d3LmFpcmFuZGNhci5tYXJyaW90dC5jb20uY26CGXd3dy5haXJhbmRjYXIu
bWFycmlvdHQuZGWCGXd3dy5haXJhbmRjYXIubWFycmlvdHQuZnKCGXd3dy5haXJh
bmRjYXIubWFycmlvdHQuaXSCGXd3dy5haXJhbmRjYXIubWFycmlvdHQucHSCF3d3
dy5mY3RncXVpY2tzZWFyY2guY29tghh3d3cuaG90ZWxzYW5kY2Fycy5iYS5jb22C
E3d3dy5pLWNvbXBhcmUuY28ubnqCI3d3dy5pbmZpbml0eWluZHVzdHJ5cGFydG5l
cnMuY29tLmF1giN3d3cubWFycmlvdHRyZXdhcmRzYWlyYW5kY2FyLmNvbS5jboIb
d3d3LnJveWFsb3JjaGlkaG9saWRheXMuY29tgg93d3cud2luZS5iYS5jb20wggED
BgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA
xHuJeqj9ywAAAWbrsKO1AAAEAwBHMEUCIHl+JqWuhC/diBIENunB99wLsftO58h4
+HHZAH9g2uBFAiEAs+2zlugmH55xOW1IDad9rHJly41OqrCNenUKYTyhdPYAdQB0
ftqDMa0zEJEhnM4lT0Jwwr/9XkIgCMY3NXnmEHvMVgAAAWbrsKQFAAAEAwBGMEQC
IBEc/FQYC2/vzBr3metXn0Qiv3Zi8WKiuaWgVOXTTy5DAiArEfUIl06W07QwO/pb
BCB/DmDx8PIrYySp+LvZrpiROzANBgkqhkiG9w0BAQsFAAOCAQEAYowxP6nnYznT
mIVaCeKXzJOfPsl/zR/xc6gM2lhw2R6JW/mxpyqS8gczt/K9xSIcKkkYXVqpalUG
bZ703MDx4kBnB1nH/giHoaN2HvdEcANBPV7Gxy9tuN1iTDRa0SCIoUpDr13e8m9g
MHf7faO5k1aAyKmPtHHwhGjUHjJj+3bkOdXAyQvHwFrq/sq6d31GcFR50wrzDTUY
BU8ooZgjymePbSQuHlUz7xIN/FglIOV0j8g9nWQPfmGPTwLhRn8BLrwUZx0ZznoZ
fSCt5xbqfZ7aBL5p24GRito7zxPjEy0UyjtSvHetWllol032nI0swBdnyxkERjNE
T1i5XQWUIw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zZ84y2MwH4jhp4Iu4a7
+yll3TWfC2oECGcK1PMHNYiUcvP6Zr7PsGCwyrDkeX50VTzgDRP4EAQb5hCi99fZ
Dzbl61qfJl8dAlVdSaBcm+44UhyCaXaMPV6YQqAH8tdOPoGG1P1UaO94Ppg/qD9y
dyCHqEQu+3tL5JW78zeK0brwuwmDA7QdlF3yFGxJ5KR9f9POVenpOWjaAzFzuHfW
qye+UdsIylZeNrnbAMOl7YJK6XQYE85sJ8wxK5ZnZQqzAv6uAR/zgyzlaNpIFWGb
3d1uReY0JKgOIa9P9lUrIKiz3XpNZ3EMnAQfaj1EO/NCfK7Ini/ivTcfoCct9rxU
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 143535807968572307046649400027219544840
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.switchfly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28682964183338987134452138484790329472824358877593105064104808710657055405540724763735182993172892187367598283565318386270302249313198719439969219422579341073919565217165197212188454009115389396981080904348469608729645066084039887043785276508169265416085633476529244837198650827531862366410878606262636740272705438630350886594293803421742592494936161219882843105964118460927517785708231793880249376896500397658947681113561457245082981960406154868432214297518899145669783174211932823826176375872979522097049921850285395847760205692065974168279320309539582567765052104833230699249849833893634268834267371621017718641771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc1cf0f7c5dfeab58cae3b843e26c04bc3100c86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.switchfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aereo.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amhols.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviosandmoney.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmastercard.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2c.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfast.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.easytahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.norwegianholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingsuk.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carawards.mileageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carhotel.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectonhotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectonhotelscarsandmore.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flight-hotel.westjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flighthotel.westjet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservacorporativo.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roh.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myatlantisvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicoturisticos.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surpreenda.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travellatampass.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelmarketplace.delta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.espanol.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctgquicksearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsandcars.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityindustrypartners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wine.ba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000166ebb0a3b500000403004730450220797e26a5ae842fdd88120436e9c1f7dc0bb1fb4ee7c878f871d9007f60dae045022100b3edb396e8261f9e71396d480da77dac7265cb8d4eaab08d7a750a613ca174f6007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000166ebb0a40500000403004630440220111cfc54180b6fefcc1af799eb579f4422bf7662f162a2b9a5a054e5d34f2e4302202b11f508974e96d3b4303bfa5b04207f0e60f1f0f22b6324a9f8bbd9ae98913b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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