acquiatest.flitech.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:d2:a2:8e:59:77:e7:5e:ca:32:e1:f2:96:1a:b1:6a:a9:cb was issued on by Let's Encrypt.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=acquiatest.flitech.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:d2:a2:8e:59:77:e7:5e:ca:32:e1:f2:96:1a:b1:6a:a9:cb
Serial Number (int): 333012228904783097279462580517466515614155
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ce:6a:c1:28:55:39:8a:2e:c9:fd:b9:09:23:22:35:3d:35:c2:ce:13
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:c0:ed:cf:1f:27:8f:30:60:55:ac:c7:64:d2:3e:29:7d:73:48:3b
Fingerprint (sha256): 5d:b8:47:e5:af:1a:e2:23:a3:52:32:ac:34:9d:64:e4:8c:db:36:8c:20:f5:e7:d6:f2:45:f2:29:eb:9e:6d:40

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate acquiatest.flitech.net

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acquiatest.flitech.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.test.acquia.fcl.cloud
acquiatest.4dconsulting.com.au
acquiatest.anewstoryeverysecond.com
acquiatest.ao.fclmedia.com
acquiatest.au.fcm.travel
acquiatest.b2b.gapyear.com
acquiatest.campustravel.com.au
acquiatest.connect.fcm.travel
acquiatest.cruiseabout.co.nz
acquiatest.cruiseabout.com.au
acquiatest.escapetravel.com.au
acquiatest.extranet.fcm.travel
acquiatest.fcfoundation.org.au
acquiatest.fclmedia.com
acquiatest.fcm.travel
acquiatest.fctgcareers.com
acquiatest.fctravelclub.com.au
acquiatest.flightcentre.co.nz
acquiatest.flightcentre.co.za
acquiatest.flightcentre.com
acquiatest.flightcentre.com.au
acquiatest.flightcentre.com.cn
acquiatest.flightcentre.com.hk
acquiatest.flightcentre.eu
acquiatest.flightcentrecareers.co.uk
acquiatest.flightcentreireland.ie
acquiatest.flightshop.co.in
acquiatest.flitech.net
acquiatest.infinityholidays.co.nz
acquiatest.infinityholidays.com.au
acquiatest.myadventuretravel.com
acquiatest.new.escapetravel.com.au
acquiatest.onefcm.fcm.travel
acquiatest.p4finance.com
acquiatest.platform.fclmedia.com
acquiatest.product.fclweb.net
acquiatest.queue.fclmedia.com
acquiatest.round-the-world.com
acquiatest.roundtheworldexperts.co.uk
acquiatest.services.fclmedia.com
acquiatest.stageandscreen.ca
acquiatest.stageandscreen.co.nz
acquiatest.stageandscreen.travel
acquiatest.stageandscreen.us
acquiatest.stageandscreentravel.co.uk
acquiatest.stageandscreentravel.co.za
acquiatest.status.fclmedia.com
acquiatest.studentflights.co.nz
acquiatest.studentflights.com.au
acquiatest.thebigaussiereunion.com
acquiatest.travel-associates.co.nz
acquiatest.travel-associates.com.au
acquiatest.travel-associates.us
acquiatest.travelassociates.com
acquiatest.travelexpo.net.au
acquiatest.travelmoney.co.nz
acquiatest.travelmoneygroup.com
acquiatest.travelmoneyoz.com
acquiatest.travelmoneyusa.com
acquiatest.v0.flightcentre.co.nz
acquiatest.v0.travel-associates.com.au
acquiatest.v0.travelmoneyoz.com
acquiatest.v1.flightcentre.co.nz
acquiatest.v1.travel-associates.com.au
acquiatest.v1.travelmoneyoz.com

Other certificates including the domain name flitech.net

(limited to 100 certificates)
acquiaprod.flitech.net
redirect.aws.fclweb.net
acquiadev.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
receiptgate-global-stage.au.flitech.net
profilegate.au.flitech.net
acquiaprod.flitech.net
*.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
acquiadev.flitech.net
hrauinfo.au.flitech.net
acquiaprod.flitech.net
acquiaprod.flitech.net
acquiadev.flitech.net
graham.au.flitech.net
acquiaprod.flitech.net
api-customerprofile-uat.au.flitech.net
receiptgate-global.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
*.nz.flitech.net
engineering.flitech.net
api-sabre-tst.au.flitech.net
acquiaprod.flitech.net
jira.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
au.cruise.flitech.net
redirect.aws.fclweb.net
travellerlocator.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
portal.au.flitech.net
redirect.aws.fclweb.net
acquiaprod.flitech.net
profilegate-stg.au.flitech.net
redirect.aws.fclweb.net
graham.au.flitech.net
acquiatestau.flitech.net
prd-esb-sabre-notification-gateway.au.flitech.net
acquiaprod.flitech.net
approveplus.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
*.nz.flitech.net
redirect.aws.fclweb.net
acquiatest.flitech.net
acquiatest.flitech.net
internal-api-tst.au.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
receiptgate-global.au.flitech.net
acquiatest.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
splunk-hf-elb-aws.au.flitech.net
redirect.aws.fclweb.net
ece.au.flitech.net
acquiatest.flitech.net
acquiaprod.flitech.net
corp-invoice-printer-stg.au.flitech.net
*.nz.flitech.net
acquiaprod.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
redirect.aws.fclweb.net
engineering.flitech.net
internal-api-tst.au.flitech.net
receiptgate-global.au.flitech.net
engineering.flitech.net
acquiastagecf.flitech.net
crystal.au.flitech.net
acquiadev.flitech.net
redirect.aws.fclweb.net
redirect.aws.fclweb.net
jira.au.flitech.net
confluence.au.flitech.net
acquiatestau.flitech.net
acquiaprod.flitech.net
crystal.au.flitech.net
redirect.aws.fclweb.net
acquiatestau.flitech.net
engineering.flitech.net
redirect.aws.fclweb.net
fx.au.flitech.net
ece.au.flitech.net
acquiatestau.flitech.net
engineering.flitech.net
api-external.au.flitech.net

Certificate

The complete raw certificate details for acquiatest.flitech.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9LccaS4oFZFdq8pFg3w
QopU3wErfSoUr0PwrZDg6oLGrVfbe3c6uOgMiCqmln4kPUUGBI0XO4eG5Oe9tF1L
g27kBVBGTeO0R5nNbtwlPN4KaZi6xFURhPBSTfPNfh+ZoFNpwAaCgDTU4w3uwiLE
I7cnZkQgZU5xQ18bYxHfRsomnft2j3nXO83j7BDKBTeruyZodWCGfgJ7ZRtjKgUF
oIwYz6hRN7tmGtj/bt/HXBuLW1enJfnzgTTmtrMapMroVc8wHo4PhiFxqqZ2GACa
1Sp7/UEjtQUYFkPAr4yuRWTBIim05dY4RXT+QGRUuqbJgxpxdoCCqLSMSA0Innbr
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333012228904783097279462580517466515614155
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-19 01:30:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-17 01:30:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acquiatest.flitech.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25730355396356632002928409707043666634883340863599983709491552272429358619595771586447258396912548062501907913688487713157123779648437059186950824937418311621877518140053230007861326290685432430970315116438237924583984479270250649456407978149659245665672609026613001581324224754599533229311313532234113002123157383894815837098333586657949010632303678538536518933760216421118828718491071772773508860315507467824451527103555419387658054308750630428049926996168335554257675130926960780215598287356612170325097969066082264862399093243533203666865010526242686320268660059593853094087925400701042449472385589048926595902347
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce6ac12855398a2ec9fdb9092322353d35c2ce13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2094 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.test.acquia.fcl.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.anewstoryeverysecond.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.ao.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.au.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.b2b.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.campustravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.connect.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.extranet.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fctgcareers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.fctravelclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentre.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentrecareers.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightcentreireland.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flightshop.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.flitech.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.myadventuretravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.new.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.onefcm.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.p4finance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.platform.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.product.fclweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.queue.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.round-the-world.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.roundtheworldexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.services.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreen.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreentravel.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.stageandscreentravel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.status.fclmedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.studentflights.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.studentflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.thebigaussiereunion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travel-associates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.travelmoneyusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v0.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiatest.v1.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0064acd8696b6f710a9873d8a39ecd9f48be6cf52d1b672c880a22119168d5d6c2be43ab49fcb0d3ba87ca4a91d9a1f25f4746b68fbb90ed5bf7fb06c13e900a1e749e43aa73f35869a7a5875cbf3a90b5bfe809150a525f36b5ff81a371050f30eeb2733fb8ec3c168e73c89a465d9acf404f15c9b152226644c48289aa6b25bf1ac386fbef9853a2b9ef9eceda94fd45eee80c237aef4387cb3c92f0afd42a4a67667fe0ba447c9151ee75f9026b739360e65d2c55cfd94afc923f85072c7b89e36e60642a781f8cb299dba4f93027846d9bc2a6dd3739e4b009dffa5b00f2582110c95556b2ca1082a72b6b87da671860e2ea5d401609c27d8abcc29c25425d