acquiaprod.flitech.net

Issued by R3

About this certificate

This digital certificate with serial number 04:71:03:ac:61:c9:a2:b6:28:74:6f:d5:b1:bb:d8:75:d7:ae was issued on by Let's Encrypt.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiaprod.flitech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:71:03:ac:61:c9:a2:b6:28:74:6f:d5:b1:bb:d8:75:d7:ae
Serial Number (int): 386905933931523004702539678229163557640110
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 93:1e:00:e6:fb:03:11:39:bd:1b:87:25:a4:c9:7e:41:90:f8:9f:b0
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 7b:c5:b9:09:73:24:ce:d2:85:dc:2c:83:ca:77:ec:46:ee:a6:ce:f4
Fingerprint (sha256): 0c:9c:3a:7b:8f:f5:2d:a6:a2:13:46:79:42:1a:de:f7:26:33:fe:ff:f1:d0:37:ad:1a:2d:85:4a:70:38:d5:24

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate acquiaprod.flitech.net

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiaprod.flitech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.admin.acquia.fcl.cloud
*.prod.acquia.fcl.cloud
acquiaprod.flitech.net
admin.4dconsulting.com.au
admin.anewstoryeverysecond.com
admin.ao.fclmedia.com
admin.b2b.gapyear.com
admin.campustravelusa.com
admin.cruiseabout.co.nz
admin.cruiseabout.com.au
admin.fcfoundation.org.au
admin.fclmedia.com
admin.flightcentre.co.nz
admin.flightcentre.co.uk
admin.flightcentre.co.za
admin.flightcentre.com
admin.flightcentre.com.au
admin.flightcentre.eu
admin.flightcentrecareers.co.uk
admin.flightcentreireland.ie
admin.gcr.fclmedia.com
admin.gcr.travel-associates.com.au
admin.infinityholidays.co.nz
admin.infinityholidays.com.au
admin.mercury.fclmedia.com
admin.p4finance.com
admin.platform.fclmedia.com
admin.product.fclweb.net
admin.queue.fclmedia.com
admin.round-the-world.com
admin.roundtheworldexperts.co.uk
admin.services.fclmedia.com
admin.stageandscreen.ca
admin.stageandscreen.travel
admin.stageandscreen.us
admin.stageandscreentravel.co.uk
admin.stageandscreentravel.co.za
admin.studentuniverse.gapyear.com
admin.thebigaussiereunion.com
admin.thetravelclub.co.uk
admin.travel-associates.co.nz
admin.travel-associates.com.au
admin.travelassociates.com
admin.travelexpo.net.au
admin.travelmoney.co.nz
admin.travelmoneygroup.com
admin.travelmoneyoz.com
admin.travelmoneyusa.com
admin.v0.flightcentre.co.nz
admin.v0.travel-associates.com.au
admin.v1.flightcentre.co.nz
admin.v1.travelmoneyoz.com
old.escapetravel.com.au
platform.fclmedia.com
product.fclweb.net
v1.fctravelclub.com.au
v1.travelmoneyoz.com

Other certificates including the domain name flitech.net

(limited to 100 certificates)
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
receiptgate-global-stage.au.flitech.net
profilegate.au.flitech.net
acquiaprod.flitech.net
*.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiadev.flitech.net
hrauinfo.au.flitech.net
acquiaprod.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
graham.au.flitech.net
acquiaprod.flitech.net
api-customerprofile-uat.au.flitech.net
receiptgate-global.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
*.nz.flitech.net
engineering.flitech.net
api-sabre-tst.au.flitech.net
acquiaprod.flitech.net
jira.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
au.cruise.flitech.net
redirect.aws.fclweb.net
travellerlocator.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
portal.au.flitech.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
profilegate-stg.au.flitech.net
redirect.aws.fclweb.net
graham.au.flitech.net
acquiatestau.flitech.net
prd-esb-sabre-notification-gateway.au.flitech.net
acquiaprod.flitech.net
approveplus.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
*.nz.flitech.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
internal-api-tst.au.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
receiptgate-global.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
splunk-hf-elb-aws.au.flitech.net
redirect.aws.fclweb.net
ece.au.flitech.net
acquiatest.flitech.net
acquiaprod.flitech.net
corp-invoice-printer-stg.au.flitech.net
*.nz.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
internal-api-tst.au.flitech.net
receiptgate-global.au.flitech.net
engineering.flitech.net
acquiastagecf.flitech.net
crystal.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
jira.au.flitech.net
confluence.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
engineering.flitech.net
redirect.aws.fclweb.net
fx.au.flitech.net
ece.au.flitech.net
acquiatestau.flitech.net
engineering.flitech.net
api-external.au.flitech.net

Certificate

The complete raw certificate details for acquiaprod.flitech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7QQbzSJhzo8tTx7Eemq
uIyhWvmdSVrkR/vh5TMttbqKoxpC3+eunN1bwCkrEbDeJSUiD0DvXffttl0w/BEZ
X0dQJko8u+NV2UR/A7mrLRREEhjWtD7k12D/hLBinlpb6PkF4zgbS4nJ+JBnIefB
BOynM9OPzcPHUnX1gmKyXThol8W4Hy0JpsedYkK53bk7wzc8+2KFbHd3DewlS+IH
vBm7kR87ae+EIcWGU547e/ZPV0ZigNpkdb6vdjMRedEJDzC18j9uLJpTua+zDSGe
vhTKUEAdD3Q5LFkIIUiVJzg7PKOfwlFH0aFJGtziao8Hg4m0Qw+CIkbbXuKzJxIs
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 386905933931523004702539678229163557640110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-03 21:35:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-03 21:35:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiaprod.flitech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22180496333889588864944827090933170402429242519170824610755506325263618914222480151596428586478386941342283282213965562526941487115320146396441604032108743949164262875078256527548363060646890724185470235898801243942707698876125657415701090931382277351879005059511834730756138797378597522840249958853975378977942244567474989896924821224980704425393901985958023277753055604756767485101924914410676265772131582308514317093978962110983334990673043469204863761362493804892448917342142846052741395816689645675345604616046504998016084995242201535897338806543035768367895367222549397793117631003022515340773918342843999595759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							931e00e6fb031139bd1b8725a4c97e4190f89fb0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1560 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.admin.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.prod.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiaprod.flitech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.anewstoryeverysecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ao.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.b2b.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.campustravelusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentrecareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.flightcentreireland.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gcr.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gcr.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mercury.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.p4finance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.product.fclweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.queue.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.round-the-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roundtheworldexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.services.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stageandscreen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stageandscreen.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stageandscreen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stageandscreentravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stageandscreentravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.studentuniverse.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thebigaussiereunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.thetravelclub.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travel-associates.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelmoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.travelmoneyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v0.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v0.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v1.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.v1.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'old.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'product.fclweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.fctravelclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v1.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017e221573f00000040300483046022100dbd29e6cab07d1655ed5cac71fa51ae12b2a4d97e939c5d5daca8c62a7d4df45022100a82169636e0132c4f1e378ecd7faa80de4bc0867dd5931bbf0a1baaeabbf952200750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017e2215741c0000040300463044022048b34123c99ba529dbabfa5bd6afcdab502f61e22ab98563eb66e1aff19b470f02205004a3e1caf1f0370bbcc66032776f33f7e3a731125f9ed560c5a98a15ff3d78
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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