flightcentre.com.hk

Issued by R3

About this certificate

This digital certificate with serial number 03:7e:7f:4d:02:3f:6e:ad:53:a8:78:27:c0:59:85:77:90:bf was issued on by Let's Encrypt.

With 42 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=flightcentre.com.hk

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:7f:4d:02:3f:6e:ad:53:a8:78:27:c0:59:85:77:90:bf
Serial Number (int): 304381647835232224169856343976431580582079
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 28:21:90:a9:87:8d:d5:9b:61:55:34:44:e2:c9:fd:c0:53:5c:1b:4b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b2:e6:e3:7d:7a:8f:df:64:21:c1:d0:40:83:75:a7:ca:af:12:71:28
Fingerprint (sha256): 29:37:ad:20:b3:41:83:eb:a2:57:cf:7d:f5:c0:31:d0:95:b2:ab:0a:73:cc:ca:07:76:10:56:3d:5f:8b:17:64

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate flightcentre.com.hk

42

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flightcentre.com.hk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

4dconsulting.com.au
bookings.flightcentre.co.za
ci-meetings.com.au
corporatetraveller.ca
corporatetraveller.quebec
corporatetraveller.us
corptraveller.co.uk
cruiseabout.co.nz
discoveramericas.com.au
discoveramericas.net.au
fcbt.co.za
fcmmeetings.com.au
fcmonline.com.cn
flightcentre.com.hk
flightcentrebusinesstravel.co.uk
flightcentrebusinesstravel.co.za
gift.flightcentre.com.au
securepay.universaltraveller.com.au
studentuniverse.gapyear.com
travel-associates.us
travelexpo.net.au
www.4dconsulting.com.au
www.canadaalaska.com.au
www.ci-meetings.com.au
www.corporatetraveller.ca
www.corporatetraveller.quebec
www.corporatetraveller.us
www.corptraveller.co.uk
www.cruiseabout.co.nz
www.cruiseexpo.net.au
www.discoveramericas.com.au
www.discoveramericas.net.au
www.discovereurope.net.au
www.fcbt.co.za
www.fcmonline.com.cn
www.flightcentre.com.hk
www.flightcentrebusinesstravel.co.uk
www.flightcentrebusinesstravel.co.za
www.flightcentreireland.ie
www.my.travelmoneyoz.com
www.travel-associates.us
www.travelexpo.net.au

Other certificates including the domain name flightcentre.com.hk

(limited to 100 certificates)
admin.4dconsulting.com.au
www.amadeusepower.com
acquiastage.flightcentre.com.au
acquiastage.flightcentre.com.au
acquiadev.flitech.net
acquiatest.flitech.net
flightcentre.com.hk
acquiaprod.flitech.net
www.flightcentre.com
www.studentflights.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
www.flightcentre.com
acquiaprod.flitech.net
acquiatest.4dconsulting.com.au
flightcentre.com.hk
acquiaprod.flitech.net
www.flightcentre.com
hotels.flightcentre.com.hk
www.studentflights.com.au
acquiaprod.flitech.net
acquiaprod.flitech.net
flightcentre.com.hk
www.studentflights.com.au
acquiadev.flitech.net
www.flightcentre.com
acquiadev.4dconsulting.com.au
acquiatest.flitech.net
www.flightcentre.com
flightcentre.com.hk
flightcentre.com.hk
www.studentflights.com.au
www.flightcentre.com
flightcentre.com.hk
hotels.flightcentre.com.hk
acquiatest.4dconsulting.com.au
www.amadeusepower.com
www.flightcentre.com
acquiatest.flitech.net
www.studentflights.com.au
acquiaprod.flitech.net
www.studentflights.com.au
www.studentflights.com.au
acquiaprod.flitech.net
www.flightcentre.com
hotels.flightcentre.com.sg
www.flightcentre.com
www.flightcentre.com
admin.4dconsulting.com.au
flightcentre.com.hk
flightcentre.com.hk
www.flightcentre.com
flightcentre.com.hk
acquiadev.4dconsulting.com.au
flightcentre.com.hk
acquiadev.flitech.net
hotels.flightcentre.com.hk
admin.4dconsulting.com.au
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
www.flightcentre.com
www.flightcentre.com
www.flightcentre.com
www.flightcentre.com
acquiastage.flightcentre.com.au
www.flightcentre.com
flightcentre.com.hk
www.flightcentre.com
acquiaprod.flitech.net
acquiadev.flitech.net
www.flightcentre.com
dev-secure.flightcentre.com.au
acquiadev.4dconsulting.com.au
hotels.flightcentre.com.hk
www.flightcentre.com
acquiaprod.flitech.net
acquiadev.flitech.net
www.flightcentre.com
www.studentflights.com.au
acquiadev.flitech.net
www.flightcentre.com
www.flightcentre.com
acquiadev.4dconsulting.com.au
flightcentre.com.hk
www.flightcentre.com
acquiastage.flightcentre.com.au
www.flightcentre.com
flightcentre.com.hk
acquiastage.flightcentre.com.au
www.flightcentre.com
www.flightcentre.com
www.flightcentre.com
acquiatest.flitech.net
acquiadev.flitech.net
acquiastage.flightcentre.com.au
www.studentflights.com.au
acquiatest.flitech.net
www.flightcentre.com
acquiatest.flitech.net
www.flightcentre.com

Certificate

The complete raw certificate details for flightcentre.com.hk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJCTCCB/GgAwIBAgISA35/TQI/bq1TqHgnwFmFd5C/MA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMzA5MTYwNzUxMTlaFw0yMzEyMTUwNzUxMThaMB4xHDAaBgNVBAMT
E2ZsaWdodGNlbnRyZS5jb20uaGswggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCuQvScvwX6N9G7XXbdjWcM/fhGRqQMOb2SlrX8NmBrq9GFOhOzs6Mk0dSZ
VijqfyT9KK2gPqakVZCspC+hStkRh1paLGy9yk60J0M3raFPLk/GJDZapKvuWK1F
G2TC5Ukn8cK616RSuldTgBd+WgwGRDOmOn2+M5+Xwk0n0s7HqRFXIGZ2oE/HEeCs
N/XVC580jkJQDSeHHzNKb60xhAao4G0L0HQsUohsTiDx03nN85SNX7LB3XyZtlDs
uBkqezcuDSXvZ96NINNlN4qPRVYiE1qt1IKDxtastpEQfG9EN5mH0EqPX9aX+gLJ
6iWc4MojRg05+TeICz80BTYmY2nDAgMBAAGjggYrMIIGJzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFCghkKmHjdWbYVU0ROLJ/cBTXBtLMB8GA1UdIwQYMBaAFBQusxe3
WFbLrlAJQOYfr52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0
cDovL3IzLm8ubGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5j
ci5vcmcvMIIEMwYDVR0RBIIEKjCCBCaCEzRkY29uc3VsdGluZy5jb20uYXWCG2Jv
b2tpbmdzLmZsaWdodGNlbnRyZS5jby56YYISY2ktbWVldGluZ3MuY29tLmF1ghVj
b3Jwb3JhdGV0cmF2ZWxsZXIuY2GCGWNvcnBvcmF0ZXRyYXZlbGxlci5xdWViZWOC
FWNvcnBvcmF0ZXRyYXZlbGxlci51c4ITY29ycHRyYXZlbGxlci5jby51a4IRY3J1
aXNlYWJvdXQuY28ubnqCF2Rpc2NvdmVyYW1lcmljYXMuY29tLmF1ghdkaXNjb3Zl
cmFtZXJpY2FzLm5ldC5hdYIKZmNidC5jby56YYISZmNtbWVldGluZ3MuY29tLmF1
ghBmY21vbmxpbmUuY29tLmNughNmbGlnaHRjZW50cmUuY29tLmhrgiBmbGlnaHRj
ZW50cmVidXNpbmVzc3RyYXZlbC5jby51a4IgZmxpZ2h0Y2VudHJlYnVzaW5lc3N0
cmF2ZWwuY28uemGCGGdpZnQuZmxpZ2h0Y2VudHJlLmNvbS5hdYIjc2VjdXJlcGF5
LnVuaXZlcnNhbHRyYXZlbGxlci5jb20uYXWCG3N0dWRlbnR1bml2ZXJzZS5nYXB5
ZWFyLmNvbYIUdHJhdmVsLWFzc29jaWF0ZXMudXOCEXRyYXZlbGV4cG8ubmV0LmF1
ghd3d3cuNGRjb25zdWx0aW5nLmNvbS5hdYIXd3d3LmNhbmFkYWFsYXNrYS5jb20u
YXWCFnd3dy5jaS1tZWV0aW5ncy5jb20uYXWCGXd3dy5jb3Jwb3JhdGV0cmF2ZWxs
ZXIuY2GCHXd3dy5jb3Jwb3JhdGV0cmF2ZWxsZXIucXVlYmVjghl3d3cuY29ycG9y
YXRldHJhdmVsbGVyLnVzghd3d3cuY29ycHRyYXZlbGxlci5jby51a4IVd3d3LmNy
dWlzZWFib3V0LmNvLm56ghV3d3cuY3J1aXNlZXhwby5uZXQuYXWCG3d3dy5kaXNj
b3ZlcmFtZXJpY2FzLmNvbS5hdYIbd3d3LmRpc2NvdmVyYW1lcmljYXMubmV0LmF1
ghl3d3cuZGlzY292ZXJldXJvcGUubmV0LmF1gg53d3cuZmNidC5jby56YYIUd3d3
LmZjbW9ubGluZS5jb20uY26CF3d3dy5mbGlnaHRjZW50cmUuY29tLmhrgiR3d3cu
ZmxpZ2h0Y2VudHJlYnVzaW5lc3N0cmF2ZWwuY28udWuCJHd3dy5mbGlnaHRjZW50
cmVidXNpbmVzc3RyYXZlbC5jby56YYIad3d3LmZsaWdodGNlbnRyZWlyZWxhbmQu
aWWCGHd3dy5teS50cmF2ZWxtb25leW96LmNvbYIYd3d3LnRyYXZlbC1hc3NvY2lh
dGVzLnVzghV3d3cudHJhdmVsZXhwby5uZXQuYXUwEwYDVR0gBAwwCjAIBgZngQwB
AgEwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgC3Pvsk35xNunXyOcW6WPRsXfxC
z3qfNcSeHQmBJe20mQAAAYqdL/OTAAAEAwBHMEUCIQDtKiH1M5UuYN/fvcLqxJeY
VtxOjwqfrDjP/+5VlqRdnQIgMh5hahuXFuQ4/vsL+uH4ohOeMlh+Smhz7znTzrpq
i7gAdQB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYqdL/OgAAAE
AwBGMEQCIG2lgN1xUddXqDx20TjmlMpQDYyDQjURkk92fooYC56JAiApBaYtv7ki
joIIJSyL1GJvmrHGn1/G77RIgmvvP17UVjANBgkqhkiG9w0BAQsFAAOCAQEAang1
885ggCYKpfglYuHJjEwJxEk963Y4ibn3ZoB06HUfNnbFl0g0l15PBNG3a6HrXB1E
nielclkmzU1pW5BZ/aRr7xEMlkjE3k6BrH/CtY3UIAKfXg4ySI9yYIgF2wFKrccP
YeVl/3lnoC4kWmM4/R8VOv7dfUoER5KRL0x0meREWSzXlbFNyqMHp08SDpbK62sT
kfZl2P5rRFhFKVa8AwxOq/UyHgpLCkJ7yqT0S9/sKCa0tPunyszQ1HLrrgHb0vHK
tMLBqdSlaLdI0gwa1+h/QvsTuXmIdP+oHgL7P3Go4RkWtUXV8SIV5t7POQPCMoTy
Zx9XaVlCQ/LsKZ3cgw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkL0nL8F+jfRu1123Y1n
DP34RkakDDm9kpa1/DZga6vRhToTs7OjJNHUmVYo6n8k/SitoD6mpFWQrKQvoUrZ
EYdaWixsvcpOtCdDN62hTy5PxiQ2WqSr7litRRtkwuVJJ/HCutekUrpXU4AXfloM
BkQzpjp9vjOfl8JNJ9LOx6kRVyBmdqBPxxHgrDf11QufNI5CUA0nhx8zSm+tMYQG
qOBtC9B0LFKIbE4g8dN5zfOUjV+ywd18mbZQ7LgZKns3Lg0l72fejSDTZTeKj0VW
IhNardSCg8bWrLaREHxvRDeZh9BKj1/Wl/oCyeolnODKI0YNOfk3iAs/NAU2JmNp
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304381647835232224169856343976431580582079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-16 07:51:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-15 07:51:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flightcentre.com.hk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21998482059967351676722961471438124354723202275432421623302510624313377517630193763378067330299566074750182881276268033317755145966462510637159514323745914061887518073116663653297873150647938018161688910844587091882982830694525328676742708487541769792446576050383796225324670928366714165743312729515513131429299152143601532251686232282009646784117680052163112349940752623885483760482096337003009190064327510000411261649715797152681999670367178556141580254768721211572607737574445098347815946659883777453275216208049403596009919670107889057236238791744349426421571611635732302184329854825210216550491704441970454915523
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							282190a9878dd59b61553444e2c9fdc0535c1b4b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1066 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ci-meetings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatetraveller.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatetraveller.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatetraveller.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corptraveller.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoveramericas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'discoveramericas.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcbt.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmmeetings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fcmonline.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentrebusinesstravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentrebusinesstravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gift.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepay.universaltraveller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentuniverse.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel-associates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canadaalaska.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ci-meetings.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatetraveller.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatetraveller.quebec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporatetraveller.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corptraveller.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruiseexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveramericas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discoveramericas.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.discovereurope.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcbt.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcmonline.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentrebusinesstravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentrebusinesstravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentreireland.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel-associates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelexpo.net.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a9d2ff3930000040300473045022100ed2a21f533952e60dfdfbdc2eac4979856dc4e8f0a9fac38cfffee5596a45d9d0220321e616a1b9716e438fefb0bfae1f8a2139e32587e4a6873ef39d3ceba6a8bb80075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a9d2ff3a0000004030046304402206da580dd7151d757a83c76d138e694ca500d8c83423511924f767e8a180b9e8902202905a62dbfb9228e8208252c8bd4626f9ab1c69f5fc6efb448826bef3f5ed456
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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