secure.switchfly.com

Issued by COMODO RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number e1:e1:fd:9d:d2:da:6b:66:27:1e:57:f4:b9:37:9a:b4 was issued on by COMODO CA Limited.

With 57 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.switchfly.com,OU=Domain Control Validated+OU=COMODO SSL Unified Communications

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): e1:e1:fd:9d:d2:da:6b:66:27:1e:57:f4:b9:37:9a:b4
Serial Number (int): 300249709798483551300653014366201289396
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1c:70:cf:f9:a5:50:0c:d0:30:92:bd:16:69:86:f1:e1:5a:05:0b:9b
AuthorityKeyId: 90:af:6a:3a:94:5a:0b:d8:90:ea:12:56:73:df:43:b4:3a:28:da:e7

Fingerprint (sha1): f4:cf:28:92:7f:53:c2:88:9e:44:94:94:54:77:f7:40:48:df:ab:1a
Fingerprint (sha256): 63:c5:ed:51:2f:76:38:2e:bf:73:e4:11:93:0d:69:59:f8:4f:83:86:a6:21:26:9b:63:82:59:5a:28:0c:5a:19

Issuing Certificate URL: http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl

Check the revocation status for certificate secure.switchfly.com

57

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.switchfly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.switchfly.com
adm.royalorchidholidays.com
agent.aavacations.com
agents.americanholidays.com
agentsni.americanholidays.com
air.useaamiles.com
amhols.americanholidays.com
aviosandmoney.iberia.com
b2b.tamviagens.com.br
b2bmastercard.tamviagens.com.br
b2c.tamviagens.com.br
belfast.americanholidays.com
book.aavacations.com
booking.easytahiti.com
booking.vacationsbymarriott.com
bookings.americanholidays.com
bookings.travelmood.ie
bookings.travelthere.com
bookingsuk.americanholidays.com
canada.americanholidays.com
carhotel.useaamiles.com
holidays.vacationsbymarriott.com
hotelandcarawards.continental.com
hotelandcarawards.mileageplus.com
hotelplanner.aavacations.com
lantours.lan.com
marriott.atlantisbahamas.com
partner.royalorchidholidays.com
redeem.getaways.jetblue.com
reservaciones.clubpremier.com
reservations.clubpremier.com
roh.royalorchidholidays.com
secure.atlantisbahamas.com
surpreenda.tamviagens.com.br
travel.melia.com
travelmarketplace.delta.com
vacaciones.lan.com
vacations.autograph-hotels.marriott.com
vacations.jetblue.com
vacations.ritzcarlton.com
www.azultravel.com.br
www.hotelsandcars.ba.com
www.marriottrewardsairandcar.co.uk
www.marriottrewardsairandcar.com
www.marriottrewardsairandcar.com.au
www.marriottrewardsairandcar.com.cn
www.marriottrewardsairandcar.de
www.marriottrewardsairandcar.es
www.marriottrewardsairandcar.fr
www.miles-and-travel.com
www.norwegianholidays.com
www.royaladventuretravel.com
www.royaladventurewholesale.com
www.royalorchidholidays.com
www.spgflights.com
www.wine.ba.com
www2.bbtur.com.br

Other certificates including the domain name switchfly.com

(limited to 100 certificates)
*.switchfly.com
*.switchfly.com
*.v184test.switchfly.com
*.v201test.switchfly.com
*.switchfly.com
secure.switchfly.com
switchfly.com
secure.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v195test.switchfly.com
secure.switchfly.com
*.testjack2.core-test.switchfly.com
*.staging.switchfly.com
*.switchfly.com
*.v192test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.qa3.switchfly.com
atlantispi.switchfly.com
switchfly.com
secure.switchfly.com
*.v143test.switchfly.com
secure.switchfly.com
*.switchfly.com
secure.switchfly.com
*.v193test.switchfly.com
secure.switchfly.com
*.v172test.switchfly.com
ancillary.switchfly.com
*.staging.switchfly.com
ds-operations.ds.core-test.switchfly.com
analytics.switchfly.com
*.v183test.switchfly.com
b2b.tamviagens.com.br
*.v195test.switchfly.com
switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.v192test.switchfly.com
*.v193test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.aws-internal.switchfly.com
*.switchfly.com
secure.switchfly.com
*.qa1.switchfly.com
*.v185test.switchfly.com
employee.switchfly.com
*.v162test.switchfly.com
www.switchfly.com
secure.switchfly.com
*.v194test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.v175test.switchfly.com
*.switchfly.com
*.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v154test.switchfly.com
*.v194test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.v163test.switchfly.com
*.uat.switchfly.com
*.switchfly.com
ancillary.switchfly.com
britishairways.switchfly.com
switchfly.com
*.v165test.switchfly.com
secure.switchfly.com
*.v192test.switchfly.com
*.switchfly.com
*.v181test.switchfly.com
*.aws.switchfly.com
www.switchfly.com
*.staging.switchfly.com
*.v164test.switchfly.com
*.uat.switchfly.com
americanexpress.switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.v151test.switchfly.com
switchfly.com
ancillary.switchfly.com
*.v121test.switchfly.com
*.switchfly.com
*.uat.switchfly.com
secure.switchfly.com
*.v182test.switchfly.com
*.v191test.switchfly.com
*.switchfly.com
secure.switchfly.com
pwp-uat.client.switchfly.com

Certificate

The complete raw certificate details for secure.switchfly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKD+nK5IC9BOdxy4uREt
V3sLmi4GDtss1lcIy3N5RZ7fKaEKVUyZFjp5Efm51V2Nh+ATp0Rnon0hROuhGQE8
Ftm2ogvAMFn+8OXNrNDlpKIYn95Bp5RvvoRrcg8CN23UZk4epPnOq9nR/klgUOK2
Hown/67n8AH3s4vDi519XbBnhOiG9YIeeyMqoisFn4zefF1bMefFTICvZG2wA8kA
m5Lk6BRKgoU71euI5utzSVsxJZggESMPEZuhyTSAbGCsn0GOwmabwzVNEGhENfkp
fgC8MtViWnCtEw3JmQdjoNkbLK6m+ZQtvhTr7qQFnSsHoVFpogKdXRWrVEj54qFK
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300249709798483551300653014366201289396
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO SSL Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.switchfly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22802284279313017982499573528967344361070019875405939014330626452204075347299629439632567839819979815290968420730499250090025364022328307825934169937386145659714909532482622600881365851089548471715218002491587891631199653233850566691131846867422058137622972911802758047265812702149888716827792017913632308605656807594052752879681334641339249363969987977689008063313707975074951146448833433251454535713413753038280415150402520321155991034180861612867565775628447021520121137956901476293370361342865645298259568715089926931089821040643090311171847055790726448654610060356123907674502883263672230467270452638858749233889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 90af6a3a945a0bd890ea125673df43b43a28dae7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c70cff9a5500cd03092bd166986f1e15a050b9b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.switchfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentsni.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amhols.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviosandmoney.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmastercard.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2c.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'belfast.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.easytahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.vacationsbymarriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.travelmood.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookings.travelthere.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bookingsuk.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'canada.americanholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carhotel.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holidays.vacationsbymarriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelandcarawards.continental.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelandcarawards.mileageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lantours.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redeem.getaways.jetblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservaciones.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roh.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surpreenda.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel.melia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelmarketplace.delta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacaciones.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.autograph-hotels.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.jetblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacations.ritzcarlton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.azultravel.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsandcars.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marriottrewardsairandcar.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.miles-and-travel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.norwegianholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaladventuretravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royaladventurewholesale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spgflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wine.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.bbtur.com.br'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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