blog.expedia.dk

- Expedia, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 25:da:21:67:00:00:00:00:50:d6:59:bb was issued on by Entrust, Inc..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Expedia, Inc.

Organization: Expedia, Inc.
State / Province: Washington
Locality: Bellevue
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 25:da:21:67:00:00:00:00:50:d6:59:bb
Serial Number (int): 11714648930174330994634938811
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 33:16:6d:82:f6:3f:3d:ae:d8:7b:93:9a:73:e4:0e:f2:04:7e:d3:9b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b2:bd:1f:ee:8c:08:9d:12:81:cc:7a:92:33:a5:7f:d6:bc:02:fe:96
Fingerprint (sha256): 42:c4:bc:20:7f:d7:c8:82:75:ab:1c:48:02:28:e0:04:2c:04:ba:64:e1:7a:88:ee:d8:c9:a7:92:f0:36:09:79

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate blog.expedia.dk

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.expedia.dk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.expedia.dk
blogg.expedia.se
blogg.expedia.no
blogi.expedia.fi
blog.expedia.de

Other certificates including the domain name expedia.dk

(limited to 100 certificates)
www.expedia.com
dansk-brewtopia.expedia.dk
www.expedia.com
www.expedia.com
www.expedia.com
guiden.expedia.dk
blog.expedia.dk
myreallondon.expedia.dk
access.expedia.com
*.expedia.dk
vc.expedia.dk
blog.expedia.dk
vc.expedia.dk
www.expedia.com
www.expedia.com
guiden.expedia.dk
www.expedia.com
apim.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
playlister.expedia.dk
www.expedia.com
access.expedia.com
www.expedia.com
apim.expedia.com
www.expedia.com
playlister.expedia.dk
blog.expedia.dk
access.expedia.com
www.expedia.com
greatmoments.expedia.no
roskilde.expedia.dk
apim.int.expedia.com
www.expedia.com
movie-quote-phrasebook.expedia.co.uk
www.expedia.com
www.expedia.com
www.expedia.com
guiden.expedia.dk
roskilde.expedia.dk
access.expedia.com
expedia.at
*.expedia.dk
www.expedia.com
guiden.expedia.dk
www.expedia.com
playlister.expedia.dk
blog.expedia.dk
www.expedia.com
redirect.expecsp.com
www.expedia.com
www.expedia.com
redirect.expecsp.com
EXPEDIA
access.expedia.com
vc.expedia.dk
feriebolig.expedia.dk
www.expedia.com
guiden.expedia.dk
www.expedia.com
www.expedia.com
blog.expedia.dk
www.expedia.com
myreallondon.expedia.se
access.expedia.com
apim.int.expedia.com
www.expedia.com
www.expedia.dk
www.expedia.com
dansk-brewtopia.expedia.dk
guiden.expedia.dk
www.expedia.com
playlister.expedia.se
roskilde.expedia.dk
www.expedia.com
www.expedia.com
support.expedia.com
www.expedia.com
expedia.com
dansk-brewtopia.expedia.dk
www.expedia.com
apim.expedia.com
myreallondon.expedia.dk
playlister.expedia.no
apim.expedia.com
vc.expedia.dk
apim.expedia.com
playlister.expedia.dk
www.expedia.com
widgets.expedia.de
dansk-brewtopia.expedia.dk
playlister.expedia.dk
myreallondon.expedia.dk
apim.expedia.com
myreallondon.expedia.dk
harryholetour.expedia.no
www.expedia.com
www.expedia.com
roskilde.expedia.dk

Certificate

The complete raw certificate details for blog.expedia.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdDCCBFygAwIBAgIMJdohZwAAAABQ1lm7MA0GCSqGSIb3DQEBCwUAMIG6MQsw
CQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2Vl
IHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMTIg
RW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MS4wLAYDVQQD
EyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFLMB4XDTE1MTIx
MDEwMDg0OVoXDTE4MTIxMDEwMzg0N1owZzELMAkGA1UEBhMCVVMxEzARBgNVBAgT
Cldhc2hpbmd0b24xETAPBgNVBAcTCEJlbGxldnVlMRYwFAYDVQQKEw1FeHBlZGlh
LCBJbmMuMRgwFgYDVQQDEw9ibG9nLmV4cGVkaWEuZGswggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQCv8FY8Y1XGmR5kVT0cIMWq+g/9dUcGK5E+1scb6L3A
vGbCnLrQQAayzodnSwEhRdLIMbNBg5s7LfTAPt6mtF4OY5tIUxDgnIWdP4TjIYOo
FPMyhvXEpyA8UX6docc6fIsjThn3Y5fz48ttDuP/Co5cmkrbvrxh5NGqAc6znM7D
QDYju6QNLSHS0dljJcIhbBkPvmDpJ7YrrCZEQKEoAq2lPY2YMCylXboXfaK/nM2r
+Ehi3yEGWnnC/0OZWiMI88pbjC8CL7KqJlDyL+y3ZBAlyNGw3csaHDMInsJNxUtw
/hjZy/sb3nuNyMxEaLU4z5iCH231mYjxCPRcuoZptPiRAgMBAAGjggHKMIIBxjAL
BgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1Ud
HwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmww
SwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93
d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYI
KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChido
dHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwYQYDVR0RBFow
WIIPYmxvZy5leHBlZGlhLmRrghBibG9nZy5leHBlZGlhLnNlghBibG9nZy5leHBl
ZGlhLm5vghBibG9naS5leHBlZGlhLmZpgg9ibG9nLmV4cGVkaWEuZGUwHwYDVR0j
BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFDMWbYL2Pz2u2HuT
mnPkDvIEftObMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBAFb7k2TkX1B8
0/mQDDWVEeO14uGOsVeJr7FkQxQFgAI7JWvwgiJ0fJAuVEupwtq1JG2FBI7Y65uU
zl2HrJuqZTWfT3yhpHI70Bdq3TQlKvrs5e8puK1cDOuijgEbNx+0NpttT4ilf0QT
7I/lYvd9iH8WlS7dmFF+bga6n2WXq+p9nqryPYUhUa1fGnzQk76ezRu3Qi2RyjFa
n2TmYE923AtyD6zmC8v7oOQ93gPYglZ3kZ78u4s2Hg83rqVOkVraFAWwW9NJnT2T
3UpLeWnD0Wxx+AUQ5bbrAqfxqNowfVma2Zw+7JPASmCF2X0GEkTq01/W2LDkz65V
MWkKn/t/mrg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/BWPGNVxpkeZFU9HCDF
qvoP/XVHBiuRPtbHG+i9wLxmwpy60EAGss6HZ0sBIUXSyDGzQYObOy30wD7eprRe
DmObSFMQ4JyFnT+E4yGDqBTzMob1xKcgPFF+naHHOnyLI04Z92OX8+PLbQ7j/wqO
XJpK2768YeTRqgHOs5zOw0A2I7ukDS0h0tHZYyXCIWwZD75g6Se2K6wmREChKAKt
pT2NmDAspV26F32iv5zNq/hIYt8hBlp5wv9DmVojCPPKW4wvAi+yqiZQ8i/st2QQ
JcjRsN3LGhwzCJ7CTcVLcP4Y2cv7G957jcjMRGi1OM+Ygh9t9ZmI8Qj0XLqGabT4
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11714648930174330994634938811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-10 10:08:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-10 10:38:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.expedia.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22210217891304338220894875076551014819975720181605507070577627758510913832987575332383380910629176301558078358637440563153261887524593345194115248337070277312406322391771927740649312002891748641953249547329944482445705175706254666089163121136714619080168651911682253700873866122693057922002506632615637651811835307090277334261964180351054421102553059710780768885758199542591617862255511561952296370698100628243430326957215691115872564288179776750519874976135047576915325286083716436929113122669704985581189831561642599571823235155886401123963684149294006562903384462186311724746099518203953303337753161284556147718289
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.expedia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogg.expedia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogg.expedia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blogi.expedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.expedia.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33166d82f63f3daed87b939a73e40ef2047ed39b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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