acquiatest.flitech.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:c4:f5:56:3f:e2:58:f8:a5:66:8a:88:77:78:a9:1c:38:35 was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiatest.flitech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:c4:f5:56:3f:e2:58:f8:a5:66:8a:88:77:78:a9:1c:38:35
Serial Number (int): 415470596335766968843183047147055105194037
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c4:f1:ee:ef:d1:76:92:a9:32:d3:5a:e3:ef:bf:86:35:71:d7:de:4f
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:33:fb:38:7f:05:46:3a:99:b1:eb:80:9a:31:e8:ef:36:37:74:5a
Fingerprint (sha256): 22:06:18:e0:83:37:af:2c:8d:11:67:f7:5f:6e:9d:58:b1:0a:22:2d:8a:b7:ee:4a:c4:a3:c1:a7:36:62:22:bc

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acquiatest.flitech.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiatest.flitech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.acquia.fcl.cloud
acquiatest.4dconsulting.com.au
acquiatest.anewstoryeverysecond.com
acquiatest.ao.fclmedia.com
acquiatest.au.fcm.travel
acquiatest.b2b.gapyear.com
acquiatest.campustravel.com.au
acquiatest.connect.fcm.travel
acquiatest.cruiseabout.co.nz
acquiatest.cruiseabout.com.au
acquiatest.escapetravel.com.au
acquiatest.extranet.fcm.travel
acquiatest.fcfoundation.org.au
acquiatest.fclmedia.com
acquiatest.fcm.travel
acquiatest.fctgcareers.com
acquiatest.fctravelclub.com.au
acquiatest.flightcentre.co.nz
acquiatest.flightcentre.co.za
acquiatest.flightcentre.com
acquiatest.flightcentre.com.au
acquiatest.flightcentre.com.cn
acquiatest.flightcentre.com.hk
acquiatest.flightcentre.eu
acquiatest.flightcentrecareers.co.uk
acquiatest.flightcentreireland.ie
acquiatest.flightshop.co.in
acquiatest.flitech.net
acquiatest.infinityholidays.co.nz
acquiatest.infinityholidays.com.au
acquiatest.myadventuretravel.com
acquiatest.new.escapetravel.com.au
acquiatest.onefcm.fcm.travel
acquiatest.p4finance.com
acquiatest.platform.fclmedia.com
acquiatest.product.fclweb.net
acquiatest.queue.fclmedia.com
acquiatest.round-the-world.com
acquiatest.roundtheworldexperts.co.uk
acquiatest.services.fclmedia.com
acquiatest.stageandscreen.ca
acquiatest.stageandscreen.co.nz
acquiatest.stageandscreen.travel
acquiatest.stageandscreen.us
acquiatest.stageandscreentravel.co.uk
acquiatest.stageandscreentravel.co.za
acquiatest.status.fclmedia.com
acquiatest.studentflights.co.nz
acquiatest.studentflights.com.au
acquiatest.thebigaussiereunion.com
acquiatest.travel-associates.co.nz
acquiatest.travel-associates.com.au
acquiatest.travel-associates.us
acquiatest.travelassociates.com
acquiatest.travelexpo.net.au
acquiatest.travelmoney.co.nz
acquiatest.travelmoneygroup.com
acquiatest.travelmoneyoz.com
acquiatest.travelmoneyusa.com
acquiatest.v0.flightcentre.co.nz
acquiatest.v0.travel-associates.com.au
acquiatest.v0.travelmoneyoz.com
acquiatest.v1.flightcentre.co.nz
acquiatest.v1.travel-associates.com.au
acquiatest.v1.travelmoneyoz.com

Other certificates including the domain name flitech.net

(limited to 100 certificates)
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
receiptgate-global-stage.au.flitech.net
profilegate.au.flitech.net
acquiaprod.flitech.net
*.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiadev.flitech.net
hrauinfo.au.flitech.net
acquiaprod.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
graham.au.flitech.net
acquiaprod.flitech.net
api-customerprofile-uat.au.flitech.net
receiptgate-global.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
*.nz.flitech.net
engineering.flitech.net
api-sabre-tst.au.flitech.net
acquiaprod.flitech.net
jira.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
au.cruise.flitech.net
redirect.aws.fclweb.net
travellerlocator.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
portal.au.flitech.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
profilegate-stg.au.flitech.net
redirect.aws.fclweb.net
graham.au.flitech.net
acquiatestau.flitech.net
prd-esb-sabre-notification-gateway.au.flitech.net
acquiaprod.flitech.net
approveplus.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
*.nz.flitech.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
internal-api-tst.au.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
receiptgate-global.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
splunk-hf-elb-aws.au.flitech.net
redirect.aws.fclweb.net
ece.au.flitech.net
acquiatest.flitech.net
acquiaprod.flitech.net
corp-invoice-printer-stg.au.flitech.net
*.nz.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
internal-api-tst.au.flitech.net
receiptgate-global.au.flitech.net
engineering.flitech.net
acquiastagecf.flitech.net
crystal.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
jira.au.flitech.net
confluence.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
engineering.flitech.net
redirect.aws.fclweb.net
fx.au.flitech.net
ece.au.flitech.net
acquiatestau.flitech.net
engineering.flitech.net
api-external.au.flitech.net

Certificate

The complete raw certificate details for acquiatest.flitech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvYHIfgTTtnua8HjBak
1aowAltJSFrvzLnQt+pCyc/VdaHn4BbO6DDZC6Skm+uX43EtkH5qjh9GRYZ/1EG7
9/t/8nZeSC/tONRW2yKGAJNC7JApaqTGkRcwl2UrthAw2DPyq2reM7QeAPt99Dqw
KkcPPIWn7RheS9VJYwS4n4qRsNMCKQjsKeNupu2ln8Vv/rcy4CP1MDvawU7Dhyb6
1aKq+l08G0hAWP1quP60wCjqeegqEh5zAmjrqOjcNyGiuc8NlOZldNEW7AYamgjv
P1z+4T88KWHK29yh82X/3CstUq98xV3A1BbPEnwoIuXUXr7Xvx1aJPPxysjJIl5u
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 415470596335766968843183047147055105194037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-21 02:47:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 02:47:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiatest.flitech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22854973784331804778627718694867456375203270061041035711087028283893057686257503514658055634714465982282364208006430360441395535419816415782450113127799003202838393483653242814845348545762039190735410238897896379592519576718635010987817543425382237377097446743643633622623398140894078312765370106823261051851465211477876580585236882986561118614896845331798405478649206124708490525449356716034851416295190618831388822512466203263334622903562553703377376836536996870114971839093931632281417587147163573523934644589523168025521772882136349986188679125032506146953303802654728045476987015030080077931828416524569781628539
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c4f1eeefd17692a932d35ae3efbf863571d7de4f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2094 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.anewstoryeverysecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.ao.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.au.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.b2b.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.campustravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.connect.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.extranet.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fctgcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fctravelclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentrecareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentreireland.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightshop.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flitech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.myadventuretravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.new.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.onefcm.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.p4finance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.product.fclweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.queue.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.round-the-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.roundtheworldexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.services.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreentravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreentravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.status.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.studentflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.studentflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.thebigaussiereunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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