secure.switchfly.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number 28:30:f6:82:c2:9e:95:fb:14:74:1e:a4:98:ce:6f:fc was issued on by COMODO CA Limited.

With 59 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.switchfly.com,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 28:30:f6:82:c2:9e:95:fb:14:74:1e:a4:98:ce:6f:fc
Serial Number (int): 53423349913261742256662525910335778812
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 70:79:fb:2b:3b:fd:2b:b4:46:2a:b4:1c:7d:8c:dd:08:f3:d2:50:f3
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): 7f:c1:ba:3d:ea:21:7e:7a:ed:ef:91:e2:63:eb:aa:97:de:60:fd:6f
Fingerprint (sha256): 17:f6:14:5b:52:81:cc:ea:91:c3:8a:9b:f7:8e:90:b1:b1:a6:cb:26:67:e9:7a:0a:d3:d0:5e:8e:23:41:02:60

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate secure.switchfly.com

59

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.switchfly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.switchfly.com
adm.royalorchidholidays.com
aereo.tamembarqueja.com.br
agent.aavacations.com
agents.americanholidays.com
agents.i-compare.co.nz
agentsni.americanholidays.com
air.useaamiles.com
amhols.americanholidays.com
aviosandmoney.iberia.com
b2b.tamviagens.com.br
b2bmastercard.tamviagens.com.br
b2c.tamviagens.com.br
belfast.americanholidays.com
book.aavacations.com
booking.easytahiti.com
bookings.americanholidays.com
bookingsuk.americanholidays.com
canada.americanholidays.com
carawards.mileageplus.com
carhotel.useaamiles.com
carsanywhere.ihg.com
collectonhotelscarsandmore.avios.com
flightsanywhere.ihg.com
hotelplanner.aavacations.com
hotelsanywhere.ihg.com
hotelscarsandmore.avios.com
marriott.atlantisbahamas.com
partner.royalorchidholidays.com
redeem.getaways.jetblue.com
reservaciones.clubpremier.com
reservacorporativo.clubpremier.com
reservations.clubpremier.com
roh.royalorchidholidays.com
secure.atlantisbahamas.com
secure.myatlantisvacation.com
servicoturisticos.tamembarqueja.com.br
surpreenda.tamviagens.com.br
travellatampass.lan.com
travelmarketplace.delta.com
vacaciones.lan.com
vacations.jetblue.com
wine.avios.com
www.azultravel.com.br
www.fctgquicksearch.com
www.hotelsandcars.ba.com
www.i-compare.co.nz
www.infinityindustrypartners.com.au
www.marriottrewardsairandcar.co.uk
www.marriottrewardsairandcar.com
www.marriottrewardsairandcar.com.au
www.marriottrewardsairandcar.com.cn
www.marriottrewardsairandcar.de
www.marriottrewardsairandcar.es
www.marriottrewardsairandcar.fr
www.norwegianholidays.com
www.royalorchidholidays.com
www.spgflights.com
www.wine.ba.com

Other certificates including the domain name switchfly.com

(limited to 100 certificates)
*.switchfly.com
*.switchfly.com
*.v184test.switchfly.com
*.v201test.switchfly.com
*.switchfly.com
secure.switchfly.com
switchfly.com
secure.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v195test.switchfly.com
secure.switchfly.com
*.testjack2.core-test.switchfly.com
*.staging.switchfly.com
*.switchfly.com
*.v192test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.qa3.switchfly.com
atlantispi.switchfly.com
switchfly.com
secure.switchfly.com
*.v143test.switchfly.com
secure.switchfly.com
*.switchfly.com
secure.switchfly.com
*.v193test.switchfly.com
secure.switchfly.com
*.v172test.switchfly.com
ancillary.switchfly.com
*.staging.switchfly.com
ds-operations.ds.core-test.switchfly.com
analytics.switchfly.com
*.v183test.switchfly.com
b2b.tamviagens.com.br
*.v195test.switchfly.com
switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.v192test.switchfly.com
*.v193test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.aws-internal.switchfly.com
*.switchfly.com
secure.switchfly.com
*.qa1.switchfly.com
*.v185test.switchfly.com
employee.switchfly.com
*.v162test.switchfly.com
www.switchfly.com
secure.switchfly.com
*.v194test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.v175test.switchfly.com
*.switchfly.com
*.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v154test.switchfly.com
*.v194test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.v163test.switchfly.com
*.uat.switchfly.com
*.switchfly.com
ancillary.switchfly.com
britishairways.switchfly.com
switchfly.com
*.v165test.switchfly.com
secure.switchfly.com
*.v192test.switchfly.com
*.switchfly.com
*.v181test.switchfly.com
*.aws.switchfly.com
www.switchfly.com
*.staging.switchfly.com
*.v164test.switchfly.com
*.uat.switchfly.com
americanexpress.switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.v151test.switchfly.com
switchfly.com
ancillary.switchfly.com
*.v121test.switchfly.com
*.switchfly.com
*.uat.switchfly.com
secure.switchfly.com
*.v182test.switchfly.com
*.v191test.switchfly.com
*.switchfly.com
secure.switchfly.com
pwp-uat.client.switchfly.com

Certificate

The complete raw certificate details for secure.switchfly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA26FCbFq9WaUCBvTLvT0K
rjk8ueeWrASQKE6Z2Fv8T+lYYKflp8btXFLdSkWqJWdVGvdoAwfgyiNSu3Kem+lq
U5TmHnidhUPoy0rbvMdVvnVLYcS6JH525lTkFbXGauUPl1YqILHl05i8Vhcy49Lw
1x1qERTF9thF6DHkUkvQ1CW6PKiuhbDIdvDjWWVcRmDqbLJuIO0qsltImQktKLB6
MlQUlKeAtlajC1GlGLLdQ8YaFlIo9rVzM9Rglwx8htzMtcyqG9/bj97Io4kvhY5d
t/c61umZmnUPRJ4SSF1bX59JsUqyY+BxTLyKhC3fW0987ADkoXpQ1au2F8jKokiC
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 53423349913261742256662525910335778812
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.switchfly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27725708793932506216030023652030713905825290687884817304758668265857786737286473682850669404685197217324335065877095468949209531340719227064860669035077867659922786444171138672327579738986050118569281041673659513225350344644518101705913533184665314542301968907458715781447092972702644745766887184443201657444107782920602991824980796810833789958909879512075652897290864484714994166389695319203087041965494293882939566391209872714375183399047817861114535640526678479336534013843460523633667436040202710405815393869396058038235962809921169304212738949118567809374213755250542597954205092882618512191729205715117862847009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7079fb2b3bfd2bb4462ab41c7d8cdd08f3d250f3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1661 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.switchfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aereo.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentsni.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amhols.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviosandmoney.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmastercard.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2c.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfast.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.easytahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingsuk.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carawards.mileageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carhotel.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectonhotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeem.getaways.jetblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservaciones.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservacorporativo.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roh.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myatlantisvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicoturisticos.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surpreenda.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travellatampass.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelmarketplace.delta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacaciones.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.jetblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azultravel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctgquicksearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsandcars.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityindustrypartners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwegianholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spgflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wine.ba.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0018bc7ef880b1183bdd298cfecc94b7b4d34bdf63d288c117b87868e84d5ae06ba9edab88d924689855908f85d39123aa649179112adafe90b8033fc9637a6b770af0445a3e7b4df8601e39f58a95847ce8a503d5a9d296db47e0dcd9ab7d4b40f841f871dc54bf0ebc67a88e69fe321e0ffb1b5cdf2ba0f80e13de3ff5cce498932eff3a9709682e0e281cd2a79e7795948204c07bf99012f7bdd2a0ad0d3fb05cc1802fe2f2eca7513b2bc2741d0b940c395afffbd440491632ac631f5285018fcdf22f5b9a527ab265def49b57250e893f4ca58b8121db06f5a3ffc4788e762acad7d6d5eaf61375052715122906cbf45bfaeb43f08e2af567723f699f47b5