www.expedia.com

- Expedia Group, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:85:30:1e:e3:c5:8c:72:ae:b0:59:33:45:14:8f:84 was issued on by DigiCert Inc.

With 43 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia Group, Inc.

Organization: Expedia Group, Inc.
State / Province: Washington
Locality: Seattle
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:85:30:1e:e3:c5:8c:72:ae:b0:59:33:45:14:8f:84
Serial Number (int): 15313059438816976247380408685649235844
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:04:0e:dc:36:34:71:2e:db:83:9b:6d:ec:99:30:7a:ad:4c:74:97
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 71:ad:f9:4d:7b:9c:34:37:16:4f:07:b9:00:e8:f2:9e:09:d4:11:b0
Fingerprint (sha256): 2b:a0:d9:82:ab:e5:a9:44:dc:50:c5:fa:71:3c:06:9f:73:75:60:77:a4:7b:1f:bf:f1:6d:86:9f:5d:63:77:96

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.expedia.com

43

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.expedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.expedia.com
xfer.bexppartnerconnect.com
www.expedia-cn.com
www.akaexpediatest.com
visatravellounge.expedia.it
visatravellounge.expedia.fr
visatravellounge.expedia.es
visatravellounge.expedia.de
visatravellounge.expedia.co.uk
trover.com
travel.uk.hotels.com
travel.se.hotels.com
travel.no.hotels.com
travel.jp.hotels.com
travel.fr.hotels.com
travel.ca.hotels.com
thumbnails.trvl-media.com
thumbnails.int.trvl-media.com
tagme.expedia.co.nz
taap.expedia.ie
taap.expedia.cn
msn.expedia.co.th
msn.expedia.co.in
msn.expedia.co.id
media.wwte.com
media.vrbo.com
m.tagme.expedia.co.nz
m.expedia.com.my
m.expedia.com.hk
m.expedia.co.th
m.expedia.co.kr
m.expedia.co.in
m.expedia.co.id
forever.travel-assets.com
f.travel-assets.com
expedia.com
euro.expedia.net
e.travel-assets.com
d.travel-assets.com
c.travel-assets.com
b.travel-assets.com
airpacific.expedia.co.nz
a.travel-assets.com

Other certificates including the domain name expedia.com

(limited to 100 certificates)
*.us-west-2.prodp.mesop.expedia.com
summervibes2022.expedia.com
*.us-west-2.i.prod.lodgingshared.expedia.com
*.us-east-1.prod.bexgnautilus.expedia.com
*.us-west-2.i.prod.internationalisation.expedia.com
*.us-east-1.prod.lodgingshared.expedia.com
*.us-east-1.test.egtiger.expedia.com
trs-tilt.prod.expedia.com
portal-lambdas-us-west-2-main.prod.epsdecaf.expedia.com
*.test.expedia.com
www.expedia.com
*.hotelplanner.com
*.prod.lshop.expedia.com
*.prod.monitoring.expedia.com
*.test.air.expedia.com
datafeed.test.epsdecaf.expedia.com
linguo-lodging-v1-us-east-1.test.epsdecaf.expedia.com
mx1a.expedia.com
secure0024.hubspot.com
vap.expedia.com
*.test.ersappengg.expedia.com
mi.expedia.com
test.contracts.expedia.com
*.us-east-1.i.prod.ewsapi.expedia.com
thingstodo.expedia.com
*.us-east-1.i.prod.bexcruise.expedia.com
*.eweprod.expedia.com
atappdgeo.expedia.com
commission-payments-us-west-2.prod.epsdecaf.expedia.com
*.us-west-2.i.test.egtiger.expedia.com
efr-lab.expedia.com
*.test.searchdiscovery.expedia.com
*.origin.expedia.com
*.us-east-1.i.test.payments.expedia.com
*.us-west-2.i.prod.lodgingpartner.expedia.com
cpa.prod.nimbus.expedia.com
*.us-west-2.i.prodp.egailabspci.expedia.com
discoverbudapest.expedia.co.uk
*.us-east-1.prod.eguser.expedia.com
*.us-west-2.i.test.ewedatasci.expedia.com
leblancresorts.expedia.com
www.excellencegroup.expedia.com
*.prod.lodgingselect.expedia.com
outrigger.expedia.com
*.expedia.com
*.hotelplanner.com
secure0024.hubspot.com
csp.expedia.com
*.prod.monitoring.expedia.com
www.expedia.com
*.us-west-2.prod.merchandising.expedia.com
*.prod.dcs.expedia.com
*.us-west-2.i.prod.localexpert.expedia.com
eps-gateway-canary-us-east-1.prod.epsdecaf.expedia.com
test.egcontactcenter.expedia.com
ean-surenext-booking-service.i.prod.epsdecaf.expedia.com
*.prod.monitoring.expedia.com
jamf.expedia.com
*.test.tuesdaySegment.expedia.com
*.us-east-1.i.prod.lodgingpartner.expedia.com
cloudbees.vrbojenkins-gn.us-west-2.test.cicdtools.expedia.com
media.expedia.com
lab.vap.expedia.com
puntacana2023.expedia.com
mk.expedia.com
*.sem.prod.gmomarketingtech.expedia.com
*.hotelplanner.com
*.hotelplanner.com
www.goodday.expedia.com
*.us-west-2.i.test.eweflex.expedia.com
li.lisecurelink.com
forum.tools.expedia.com
partner-users-api-us-west-2-main.prod.epsdecaf.expedia.com
secure0024.hubspot.com
discoverpuntacana.expedia.com
www.expedia.com
*.test.piidataprotection.expedia.com
newsroom.expedia.com
*.test.lpsprojectping.expedia.com
www.cancun2023.expedia.com
*.us-west-2.prod.lodgingbooking.expedia.com
*.us-west-2.test.egtiger.expedia.com
houston.expedia.com
Hollandtripbuilder.expedia.de
eps-com-us-west-2.test.epsdecaf.expedia.com
bcexplorer.expedia.com.au
*.us-west-2.i.prod.lodgingshared.expedia.com
www.helpinghand.expedia.com
rateshop.expedia.com
*.test.securityplatform.expedia.com
jpmcpayout.payments.expedia.com
www.puntacana.expedia.com
lx.expedia.com
canaryislands.expedia.com
lab.vap.expedia.com
www.expedia.com
*.us-east-1.int.expedia.com
www.expedia.com
*.hotelplanner.com
japanelevated.expedia.com

Certificate

The complete raw certificate details for www.expedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ9zCCCN+gAwIBAgIQC4UwHuPFjHKusFkzRRSPhDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjA4MjEwMDAwMDBaFw0yMzA4MjIyMzU5NTlaMGwxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpXYXNoaW5ndG9uMRAwDgYDVQQHEwdTZWF0dGxlMRwwGgYDVQQKExNF
eHBlZGlhIEdyb3VwLCBJbmMuMRgwFgYDVQQDEw93d3cuZXhwZWRpYS5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCe3L+Muu+IPXiw7wQMK8Ln+dSO
9jHlfNTCHNgrTZg8hLg9hzlokT1dxFvfviuLucwpIwk2Wn/WcRSrU9jKym63UBvM
yy38iCBjDjIWSq7LJI6kLh683GKwyqYUTJJGTzi7eQokKnQNLO0wFVg1Tt7er1ou
TnKFZN1Rtr54E1WiFbds1g4KhyAq+eZN8q+BRoa0+Qqr0q8/RG75Xa0MsUeYt9RE
CoEXNya1DJwEdVGpy3wF2QI3Wt8p/1wjNrIcln87YoqRPz3zcQZL8Knb4vNXK4YW
mk+6e6hIfWiOyGUCGuEDozsqbFMYo8QZLgI24dJG3mxiLnGpwT3jPZ1BKb1pAgMB
AAGjggahMIIGnTAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNV
HQ4EFgQUtwQO3DY0cS7bg5tt7Jkweq1MdJcwggOmBgNVHREEggOdMIIDmYIPd3d3
LmV4cGVkaWEuY29tght4ZmVyLmJleHBwYXJ0bmVyY29ubmVjdC5jb22CEnd3dy5l
eHBlZGlhLWNuLmNvbYIWd3d3LmFrYWV4cGVkaWF0ZXN0LmNvbYIbdmlzYXRyYXZl
bGxvdW5nZS5leHBlZGlhLml0ght2aXNhdHJhdmVsbG91bmdlLmV4cGVkaWEuZnKC
G3Zpc2F0cmF2ZWxsb3VuZ2UuZXhwZWRpYS5lc4IbdmlzYXRyYXZlbGxvdW5nZS5l
eHBlZGlhLmRlgh52aXNhdHJhdmVsbG91bmdlLmV4cGVkaWEuY28udWuCCnRyb3Zl
ci5jb22CFHRyYXZlbC51ay5ob3RlbHMuY29tghR0cmF2ZWwuc2UuaG90ZWxzLmNv
bYIUdHJhdmVsLm5vLmhvdGVscy5jb22CFHRyYXZlbC5qcC5ob3RlbHMuY29tghR0
cmF2ZWwuZnIuaG90ZWxzLmNvbYIUdHJhdmVsLmNhLmhvdGVscy5jb22CGXRodW1i
bmFpbHMudHJ2bC1tZWRpYS5jb22CHXRodW1ibmFpbHMuaW50LnRydmwtbWVkaWEu
Y29tghN0YWdtZS5leHBlZGlhLmNvLm56gg90YWFwLmV4cGVkaWEuaWWCD3RhYXAu
ZXhwZWRpYS5jboIRbXNuLmV4cGVkaWEuY28udGiCEW1zbi5leHBlZGlhLmNvLmlu
ghFtc24uZXhwZWRpYS5jby5pZIIObWVkaWEud3d0ZS5jb22CDm1lZGlhLnZyYm8u
Y29tghVtLnRhZ21lLmV4cGVkaWEuY28ubnqCEG0uZXhwZWRpYS5jb20ubXmCEG0u
ZXhwZWRpYS5jb20uaGuCD20uZXhwZWRpYS5jby50aIIPbS5leHBlZGlhLmNvLmty
gg9tLmV4cGVkaWEuY28uaW6CD20uZXhwZWRpYS5jby5pZIIZZm9yZXZlci50cmF2
ZWwtYXNzZXRzLmNvbYITZi50cmF2ZWwtYXNzZXRzLmNvbYILZXhwZWRpYS5jb22C
EGV1cm8uZXhwZWRpYS5uZXSCE2UudHJhdmVsLWFzc2V0cy5jb22CE2QudHJhdmVs
LWFzc2V0cy5jb22CE2MudHJhdmVsLWFzc2V0cy5jb22CE2IudHJhdmVsLWFzc2V0
cy5jb22CGGFpcnBhY2lmaWMuZXhwZWRpYS5jby5ueoITYS50cmF2ZWwtYXNzZXRz
LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dl
b1RydXN0UlNBQ0EyMDE4LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsG
AQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwdQYIKwYBBQUHAQEE
aTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9Bggr
BgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB
Q0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgA
dgDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYK9tp+YAAAEAwBH
MEUCIQDoBorRG/tUv2oGii0g4t8laa3P0q9E+smzrTn5w5HqeAIgBO1RzT7GEkSg
crVKpWh/+OrbLM1L/MC3AYvs4kWAqzIAdgA1zxkbv7FsV78PrUxtQsu7ticgJlHq
P+Eq76gDwzvWTAAAAYK9tp/OAAAEAwBHMEUCIFUxFrsAJ+IMiiOyWbRWs6u/H2fA
YlgaSXA79oJq5S6PAiEA9MYNekxRYW3dYGKUDE+tFZzX9HhzA+eRdH2lOv/ikT8A
dgCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYK9tqAvAAAEAwBH
MEUCIDeM36/Od2b9B2Y4pHIio4J1wd4EGqeRYpytrxeHfzbXAiEA0ZCL7W+jCYJ5
KX7/T+ZKhZA+VQh3elq2+xx5DXgm7OgwDQYJKoZIhvcNAQELBQADggEBAEndsuMb
XyBwdCI/b0PzbN69kSVDxjnYwSU6W0u5wxk92O87/bM/vSWGV/p0vpiwHiSm5zET
NklEpFC+T8ra6evrpDtzVlbqvU55SzNWqmfAfv6xbcMkRDKNKhwjQLISopDQDER6
Gn4hH355djFPxAlXPPvQhee5JY8c0eByFbt7BqlsoybU7pXcnJo9yKQgeKy7YZ9w
rCTzFgdV0w0EbuGsl4is5BrogGY4OeXHV+svO2Pz5ss0/enBEUJ1V97rIoJfvKXF
A+OkSpZn0aZXPA6MMYOZo4bBYcbXoZhqvMEyjfZQhO2U9vrjPPUXKCzpkUVcw1jo
Tng/neyWl2H8O9E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnty/jLrviD14sO8EDCvC
5/nUjvYx5XzUwhzYK02YPIS4PYc5aJE9XcRb374ri7nMKSMJNlp/1nEUq1PYyspu
t1AbzMst/IggYw4yFkquyySOpC4evNxisMqmFEySRk84u3kKJCp0DSztMBVYNU7e
3q9aLk5yhWTdUba+eBNVohW3bNYOCocgKvnmTfKvgUaGtPkKq9KvP0Ru+V2tDLFH
mLfURAqBFzcmtQycBHVRqct8BdkCN1rfKf9cIzayHJZ/O2KKkT8983EGS/Cp2+Lz
VyuGFppPunuoSH1ojshlAhrhA6M7KmxTGKPEGS4CNuHSRt5sYi5xqcE94z2dQSm9
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15313059438816976247380408685649235844
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.expedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20054507199416828093437176347023234663664214778026194702494148516168868787452363487863909775840745581954992903811936478371201886056910892044791549833799163709837203559101121324472773257158000564984529643765389611236131245162974375831190908413618841296357073731372362856077551874880571269574901013979899821770922769818212879298553648172032623579150208898905149022233535095170341147267336105402933643531613168002065358975477377717281845324417737074036557016449021509540538311031684329769925799282318641473462539880065286336628904775699901061819497441612802929781007468525077668365884326031591278574310108475503103556969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7040edc3634712edb839b6dec99307aad4c7497
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (925 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xfer.bexppartnerconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expedia-cn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.akaexpediatest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visatravellounge.expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visatravellounge.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visatravellounge.expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visatravellounge.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visatravellounge.expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trover.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.uk.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.se.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.no.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.jp.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.fr.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.ca.hotels.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails.trvl-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thumbnails.int.trvl-media.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagme.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taap.expedia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taap.expedia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.wwte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.vrbo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.tagme.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forever.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euro.expedia.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b.travel-assets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpacific.expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.travel-assets.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000182bdb69f980000040300473045022100e8068ad11bfb54bf6a068a2d20e2df2569adcfd2af44fac9b3ad39f9c391ea78022004ed51cd3ec61244a072b54aa5687ff8eadb2ccd4bfcc0b7018bece24580ab3200760035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000182bdb69fce00000403004730450220553116bb0027e20c8a23b259b456b3abbf1f67c062581a49703bf6826ae52e8f022100f4c60d7a4c51616ddd6062940c4fad159cd7f4787303e791747da53affe2913f007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a00000182bdb6a02f00000403004730450220378cdfafce7766fd076638a47222a38275c1de041aa791629cadaf17877f36d7022100d1908bed6fa3098279297eff4fe64a85903e5508777a5ab6fb1c790d7826ece8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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