www.expedia.com

- Expedia Group, Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:55:4d:97:e3:8b:66:6b:f4:04:3a:9e:53:7f:9a:51 was issued on by DigiCert Inc.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Expedia Group, Inc.

Organization: Expedia Group, Inc.
State / Province: Washington
Locality: Seattle
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:55:4d:97:e3:8b:66:6b:f4:04:3a:9e:53:7f:9a:51
Serial Number (int): 20381338949162840865657694599059053137
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 9e:a5:8d:f0:67:78:a5:69:24:20:ef:00:6d:a5:3f:d2:60:65:1e:6a
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 68:12:ed:34:09:e4:ea:8d:84:46:d4:5f:7b:39:f8:e8:b1:fb:17:6a
Fingerprint (sha256): 47:75:a6:6a:84:f7:41:81:0e:62:52:85:51:56:4b:ae:87:3c:49:e9:8d:97:36:59:b7:3a:96:5e:f3:91:3a:32

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.expedia.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.expedia.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.expedia.com
cruise.expedia-aarp.com
expedia.ae
expedia.at
expedia.be
expedia.ca
expedia.ch
expedia.cn
expedia.co.id
expedia.co.in
expedia.co.jp
expedia.co.kr
expedia.co.nz
expedia.co.th
expedia.co.uk
expedia.com
expedia.com.ar
expedia.com.au
expedia.com.br
expedia.com.hk
expedia.com.my
expedia.com.ph
expedia.com.sg
expedia.com.tw
expedia.com.vn
expedia.de
expedia.dk
expedia.es
expedia.fi
expedia.fr
expedia.ie
expedia.it
expedia.mx
expedia.nl
expedia.no
expedia.sa
expedia.se
jal.expedia.co.jp
m.expedia.co.jp
m.expedia.com.ar
m.expedia.com.br
m.expedia.com.ph
m.expedia.com.sg
m.expedia.com.tw
m.expedia.com.vn
m.expedia.mx
msn.expedia.co.jp
msn.expedia.com.sg
ninemsn.expedia.co.jp
offersvc.expedia.com
taap.expedia.cn
us.expedia.cn
www.expedia.cn
www.uciservice.com

Other certificates including the domain name expedia.com

(limited to 100 certificates)
*.us-west-2.prodp.mesop.expedia.com
summervibes2022.expedia.com
*.us-west-2.i.prod.lodgingshared.expedia.com
*.us-east-1.prod.bexgnautilus.expedia.com
*.us-west-2.i.prod.internationalisation.expedia.com
*.us-east-1.prod.lodgingshared.expedia.com
*.us-east-1.test.egtiger.expedia.com
trs-tilt.prod.expedia.com
portal-lambdas-us-west-2-main.prod.epsdecaf.expedia.com
*.test.expedia.com
www.expedia.com
*.hotelplanner.com
*.prod.lshop.expedia.com
*.prod.monitoring.expedia.com
*.test.air.expedia.com
datafeed.test.epsdecaf.expedia.com
linguo-lodging-v1-us-east-1.test.epsdecaf.expedia.com
mx1a.expedia.com
secure0024.hubspot.com
vap.expedia.com
*.test.ersappengg.expedia.com
mi.expedia.com
test.contracts.expedia.com
*.us-east-1.i.prod.ewsapi.expedia.com
thingstodo.expedia.com
*.us-east-1.i.prod.bexcruise.expedia.com
*.eweprod.expedia.com
atappdgeo.expedia.com
commission-payments-us-west-2.prod.epsdecaf.expedia.com
*.us-west-2.i.test.egtiger.expedia.com
efr-lab.expedia.com
*.test.searchdiscovery.expedia.com
*.origin.expedia.com
*.us-east-1.i.test.payments.expedia.com
*.us-west-2.i.prod.lodgingpartner.expedia.com
cpa.prod.nimbus.expedia.com
*.us-west-2.i.prodp.egailabspci.expedia.com
discoverbudapest.expedia.co.uk
*.us-east-1.prod.eguser.expedia.com
*.us-west-2.i.test.ewedatasci.expedia.com
leblancresorts.expedia.com
www.excellencegroup.expedia.com
*.prod.lodgingselect.expedia.com
outrigger.expedia.com
*.expedia.com
*.hotelplanner.com
secure0024.hubspot.com
csp.expedia.com
*.prod.monitoring.expedia.com
www.expedia.com
*.us-west-2.prod.merchandising.expedia.com
*.prod.dcs.expedia.com
*.us-west-2.i.prod.localexpert.expedia.com
eps-gateway-canary-us-east-1.prod.epsdecaf.expedia.com
test.egcontactcenter.expedia.com
ean-surenext-booking-service.i.prod.epsdecaf.expedia.com
*.prod.monitoring.expedia.com
jamf.expedia.com
*.test.tuesdaySegment.expedia.com
*.us-east-1.i.prod.lodgingpartner.expedia.com
cloudbees.vrbojenkins-gn.us-west-2.test.cicdtools.expedia.com
media.expedia.com
lab.vap.expedia.com
puntacana2023.expedia.com
mk.expedia.com
*.sem.prod.gmomarketingtech.expedia.com
*.hotelplanner.com
*.hotelplanner.com
www.goodday.expedia.com
*.us-west-2.i.test.eweflex.expedia.com
li.lisecurelink.com
forum.tools.expedia.com
partner-users-api-us-west-2-main.prod.epsdecaf.expedia.com
secure0024.hubspot.com
discoverpuntacana.expedia.com
www.expedia.com
*.test.piidataprotection.expedia.com
newsroom.expedia.com
*.test.lpsprojectping.expedia.com
www.cancun2023.expedia.com
*.us-west-2.prod.lodgingbooking.expedia.com
*.us-west-2.test.egtiger.expedia.com
houston.expedia.com
Hollandtripbuilder.expedia.de
eps-com-us-west-2.test.epsdecaf.expedia.com
bcexplorer.expedia.com.au
*.us-west-2.i.prod.lodgingshared.expedia.com
www.helpinghand.expedia.com
rateshop.expedia.com
*.test.securityplatform.expedia.com
jpmcpayout.payments.expedia.com
www.puntacana.expedia.com
lx.expedia.com
canaryislands.expedia.com
lab.vap.expedia.com
www.expedia.com
*.us-east-1.int.expedia.com
www.expedia.com
*.hotelplanner.com
japanelevated.expedia.com

Certificate

The complete raw certificate details for www.expedia.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviVr4Q4bOELiRG8CzmN0
CuPgDW+gqKkIwU3E2LLcpLUPyJ/MRlRgKHXBwp6KFyrQnxke9edjEMszpQNvpF3X
0TdJ3llvcSnl902pAWNxQJSNqO0vVkKEXexMfbxvpCvxqJrIl4u4dtWmzTBuynBf
84ASWFIVzWfRaDL+/jAnGSHy0HWrEzj1JemRxFQhk4C5PVE1AxorTXB5AbrEwPYZ
dmsaIKH9ZEUmGLWplv14OVepwI/eUTntN9/nLdKPUiRPyoXcFAQmhE805ioPQpg1
zOyzfKIyFiABChPCAtAGgifwxTALiimuHVmU6WndJupIv/dxt2RpKevZeTIV9Vk6
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20381338949162840865657694599059053137
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.expedia.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24003731125040355197367784220165277711694046201379406964264459212835496434895674110968527930005569502470734125707799028011768860635878110773188056629928280117631476568904663485865536528618207531354162690862273867723172572973536159738274008037082307634586734424080842465530929529396195708325010502292215884486198362041287078208432139849743633169863782695815180012222475016737762747229227167264831721771157544670393419035998748431802106885141579477640887019772715043805509590032166612950968064246521990419726194917930303777371920992754504444115723691963307176845481283070181027202708638316918322819469325675677531847291
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ea58df06778a5692420ef006da53fd260651e6a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (834 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruise.expedia-aarp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.sa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expedia.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jal.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.expedia.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msn.expedia.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ninemsn.expedia.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'offersvc.expedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'taap.expedia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.expedia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.expedia.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.uciservice.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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