apim.expedia.com

- Expedia, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 26:f6:32:36:a4:6f:60:b1:3b:05:42:d1:81:2f:ed:3d was issued on by Entrust, Inc..

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia, Inc.

Organization: Expedia, Inc.
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 26:f6:32:36:a4:6f:60:b1:3b:05:42:d1:81:2f:ed:3d
Serial Number (int): 51788987316717518113945348334070787389
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 0c:be:b4:4b:dc:ff:2c:cb:df:52:51:83:3c:6f:b6:43:12:f9:90:68
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 57:90:40:6d:1a:24:1d:e6:44:f0:79:ef:1e:7d:53:de:9e:cd:22:bd
Fingerprint (sha256): 1a:8a:54:02:3a:11:a5:11:24:33:54:a7:62:02:67:ea:3f:c8:bd:48:a7:29:2d:8e:c8:4e:f2:c4:e6:e7:b7:d0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate apim.expedia.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apim.expedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apim.expedia.com
apim.expedia.at
apim.expedia.be
apim.expedia.ca
apim.expedia.ch
apim.expedia.co.id
apim.expedia.co.in
apim.expedia.co.jp
apim.expedia.co.kr
apim.expedia.co.nz
apim.expedia.co.th
apim.expedia.co.uk
apim.expedia.com.ar
apim.expedia.com.au
apim.expedia.com.br
apim.expedia.com.hk
apim.expedia.com.my
apim.expedia.com.ph
apim.expedia.com.sg
apim.expedia.com.tw
apim.expedia.com.vn
apim.expedia.de
apim.expedia.dk
apim.expedia.es
apim.expedia.fi
apim.expedia.fr
apim.expedia.ie
apim.expedia.it
apim.expedia.mx
apim.expedia.nl
apim.expedia.no
apim.expedia.se
apim.useast1.expedia.com
apim.useast1.expedia.at
apim.useast1.expedia.be
apim.useast1.expedia.ca
apim.useast1.expedia.ch
apim.useast1.expedia.co.id
apim.useast1.expedia.co.in
apim.useast1.expedia.co.jp
apim.useast1.expedia.co.kr
apim.useast1.expedia.co.nz
apim.useast1.expedia.co.th
apim.useast1.expedia.co.uk
apim.useast1.expedia.com.ar
apim.useast1.expedia.com.au
apim.useast1.expedia.com.br
apim.useast1.expedia.com.hk
apim.useast1.expedia.com.my
apim.useast1.expedia.com.ph
apim.useast1.expedia.com.sg
apim.useast1.expedia.com.tw
apim.useast1.expedia.com.vn
apim.useast1.expedia.de
apim.useast1.expedia.dk
apim.useast1.expedia.es
apim.useast1.expedia.fi
apim.useast1.expedia.fr
apim.useast1.expedia.ie
apim.useast1.expedia.it
apim.useast1.expedia.mx
apim.useast1.expedia.nl
apim.useast1.expedia.no
apim.useast1.expedia.se
apim.uswest2.expedia.com
apim.uswest2.expedia.at
apim.uswest2.expedia.be
apim.uswest2.expedia.ca
apim.uswest2.expedia.ch
apim.uswest2.expedia.co.id
apim.uswest2.expedia.co.in
apim.uswest2.expedia.co.jp
apim.uswest2.expedia.co.kr
apim.uswest2.expedia.co.nz
apim.uswest2.expedia.co.th
apim.uswest2.expedia.co.uk
apim.uswest2.expedia.com.ar
apim.uswest2.expedia.com.au
apim.uswest2.expedia.com.br
apim.uswest2.expedia.com.hk
apim.uswest2.expedia.com.my
apim.uswest2.expedia.com.ph
apim.uswest2.expedia.com.sg
apim.uswest2.expedia.com.tw
apim.uswest2.expedia.com.vn
apim.uswest2.expedia.de
apim.uswest2.expedia.dk
apim.uswest2.expedia.es
apim.uswest2.expedia.fi
apim.uswest2.expedia.fr
apim.uswest2.expedia.ie
apim.uswest2.expedia.it
apim.uswest2.expedia.mx
apim.uswest2.expedia.nl
apim.uswest2.expedia.no
apim.uswest2.expedia.se

Other certificates including the domain name expedia.com

(limited to 100 certificates)
*.us-west-2.prodp.mesop.expedia.com
summervibes2022.expedia.com
*.us-west-2.i.prod.lodgingshared.expedia.com
*.us-east-1.prod.bexgnautilus.expedia.com
*.us-west-2.i.prod.internationalisation.expedia.com
*.us-east-1.prod.lodgingshared.expedia.com
*.us-east-1.test.egtiger.expedia.com
trs-tilt.prod.expedia.com
portal-lambdas-us-west-2-main.prod.epsdecaf.expedia.com
*.test.expedia.com
www.expedia.com
*.hotelplanner.com
*.prod.lshop.expedia.com
*.prod.monitoring.expedia.com
*.test.air.expedia.com
datafeed.test.epsdecaf.expedia.com
linguo-lodging-v1-us-east-1.test.epsdecaf.expedia.com
mx1a.expedia.com
secure0024.hubspot.com
vap.expedia.com
*.test.ersappengg.expedia.com
mi.expedia.com
test.contracts.expedia.com
*.us-east-1.i.prod.ewsapi.expedia.com
thingstodo.expedia.com
*.us-east-1.i.prod.bexcruise.expedia.com
*.eweprod.expedia.com
atappdgeo.expedia.com
commission-payments-us-west-2.prod.epsdecaf.expedia.com
*.us-west-2.i.test.egtiger.expedia.com
efr-lab.expedia.com
*.test.searchdiscovery.expedia.com
*.origin.expedia.com
*.us-east-1.i.test.payments.expedia.com
*.us-west-2.i.prod.lodgingpartner.expedia.com
cpa.prod.nimbus.expedia.com
*.us-west-2.i.prodp.egailabspci.expedia.com
discoverbudapest.expedia.co.uk
*.us-east-1.prod.eguser.expedia.com
*.us-west-2.i.test.ewedatasci.expedia.com
leblancresorts.expedia.com
www.excellencegroup.expedia.com
*.prod.lodgingselect.expedia.com
outrigger.expedia.com
*.expedia.com
*.hotelplanner.com
secure0024.hubspot.com
csp.expedia.com
*.prod.monitoring.expedia.com
www.expedia.com
*.us-west-2.prod.merchandising.expedia.com
*.prod.dcs.expedia.com
*.us-west-2.i.prod.localexpert.expedia.com
eps-gateway-canary-us-east-1.prod.epsdecaf.expedia.com
test.egcontactcenter.expedia.com
ean-surenext-booking-service.i.prod.epsdecaf.expedia.com
*.prod.monitoring.expedia.com
jamf.expedia.com
*.test.tuesdaySegment.expedia.com
*.us-east-1.i.prod.lodgingpartner.expedia.com
cloudbees.vrbojenkins-gn.us-west-2.test.cicdtools.expedia.com
media.expedia.com
lab.vap.expedia.com
puntacana2023.expedia.com
mk.expedia.com
*.sem.prod.gmomarketingtech.expedia.com
*.hotelplanner.com
*.hotelplanner.com
www.goodday.expedia.com
*.us-west-2.i.test.eweflex.expedia.com
li.lisecurelink.com
forum.tools.expedia.com
partner-users-api-us-west-2-main.prod.epsdecaf.expedia.com
secure0024.hubspot.com
discoverpuntacana.expedia.com
www.expedia.com
*.test.piidataprotection.expedia.com
newsroom.expedia.com
*.test.lpsprojectping.expedia.com
www.cancun2023.expedia.com
*.us-west-2.prod.lodgingbooking.expedia.com
*.us-west-2.test.egtiger.expedia.com
houston.expedia.com
Hollandtripbuilder.expedia.de
eps-com-us-west-2.test.epsdecaf.expedia.com
bcexplorer.expedia.com.au
*.us-west-2.i.prod.lodgingshared.expedia.com
www.helpinghand.expedia.com
rateshop.expedia.com
*.test.securityplatform.expedia.com
jpmcpayout.payments.expedia.com
www.puntacana.expedia.com
lx.expedia.com
canaryislands.expedia.com
lab.vap.expedia.com
www.expedia.com
*.us-east-1.int.expedia.com
www.expedia.com
*.hotelplanner.com
japanelevated.expedia.com

Certificate

The complete raw certificate details for apim.expedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUXdXkCpOP3fpGrCK8uT
2AR2/pRhYVM4zPmrxTU3Ut0irY+z5OcfGczIRclj2PbzJCn0KEto54hyhlJAeexf
tlOfec/EIqBC+NvOWicFl+5XIRZMoTmRFkyLoqOsYDLfAPT6pueBUd6xh3RLXx5K
U7gRWkUVprk+w4bzGSeHX7Jd6F5rwA6WWCFx8B95d9dNbqDpfFiFuNjmk4AjEoRm
ibTfGDa5OHijQzrxYdIzJMI8wagAiCBTwIhJixK1omFcJ4rrxboXHtqEhqVsxTfp
7CH4cLAb4z/05CjOp+ySYoUOMQ7kGkew6Dc5X4p8LnJv2y32Zuak+FIg/exXNUA8
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51788987316717518113945348334070787389
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-01 07:00:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-30 07:00:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apim.expedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23388537995899776619616933618012550907240090834295850484118398614234035983427608281023540832554926464907542923548040065464472115476574852260294436103984226633543342081168607065605609450293269748087270409052165429924750444364749704036023918630600795607880369598579820640810370120144100882954288694815034932925454471544843457207561923815518784244631667685144816754156695779027816336045034079055180698652368326542607223410156664725171484256892944788580742216406641395474929960294424367009030397363518144961744526349277543760764753696056796920943089975791143833231322430841910716850302476516797874282638327407203202382973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0cbeb44bdcff2ccbdf5251833c6fb64312f99068
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2322 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.expedia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.useast1.expedia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apim.uswest2.expedia.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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