www.flightcentre.com

- Flight Centre Travel Group Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 05:25:9d:b0:80:cb:bc:bf:be:0e:c9:18:00:45:3b:f0 was issued on by DigiCert Inc.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Flight Centre Travel Group Limited

Organization: Flight Centre Travel Group Limited
Organization unit: IT
State / Province: Queensland
Locality: South Brisbane
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:25:9d:b0:80:cb:bc:bf:be:0e:c9:18:00:45:3b:f0
Serial Number (int): 6841453285015128349990580560633084912
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9f:67:2c:79:e5:5c:27:f1:6f:02:9a:5a:49:95:d8:21:a9:cd:f6:21
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6d:41:10:17:f0:8d:6d:8c:5f:8e:76:20:70:f3:d5:16:ec:f2:0e:7a
Fingerprint (sha256): 6a:4d:c9:07:9b:a9:29:02:87:b0:34:a6:56:b4:4d:8a:00:bd:a4:a7:f4:d0:7c:b2:5b:48:3e:c1:40:62:55:0b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.flightcentre.com

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.flightcentre.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.flightcentre.com
flightcentre.com
www.travelmoney.co.nz
acquiastage.escapetravel.com.au
acquiastage.infinityholidays.co.nz
www.fcfoundation.org.au
securepay.universaltraveller.com.au
www.infinityholidays.com.au
travel-associates.fctggiftcards.com
www.flightcentre.co.uk
securepay.travelassociates.com
consultant-stg.travelmoneyoz.com
www.travelassociates.sg
cruises.flightcentre.com.au
aplusloyalty.campustravel.com.au
consultant.keytotheworld.com.au
acquiastage.cruiseabout.com.au
test-reservations.flightcentre.com
my-stg.keytotheworld.com.au
consultant.travelmoneyoz.com
acquiastage.flightcentre.com.hk
stg-securepay.travelassociates.com
www.travel-associates.us
www.travelmoneyoz.com
stg-securepay.flightcentre.com.au
acquiastage.studentflights.com.au
cruises.flightcentre.co.nz
corporate.fctggiftcards.com
www.travelassociates.hk
acquiastage.travelexpo.net.au
ecaqa.libertytravel.com
auth.roundtheworldexperts.co.uk
www.universaltraveller.com.au
eca.flightcentre.ca
universaltraveller.fctggiftcards.com
flightcentre.fctggiftregistry.com
www.infinityholidays.co.nz
www.4dconsulting.com.au
www.campustravel.com.au
emea.qualityportal.fctg.travel
acquiastage.myadventuretravel.com
eca.libertytravel.com
amer.qualityportal.fctg.travel
studentuniverse.gapyear.com
images.gapyear.com
my-stg.travelmoneyoz.com
www.fctravelclub.com.au
www.roundtheworldexperts.co.uk
securepay.flightcentre.com.au
www.travelassociates.com
acquiastage.travelmoneyoz.com
www-stg.keytotheworld.com.au
www.flightcentreireland.ie
www.flightcentre.com.au
eca.travelassociates.us
my.keytotheworld.com.au
www.onefcm.fcm.travel
webchat.flightcentre.com.au
acquiastage.flightcentre.com.au
eca.qa.libertytravel.com
stg-securepay.flightcentre.co.uk
www.flightcentre.co.nz
reservations.flightcentre.com
acquiastage.travelmoneygroup.com
flipboard.aws.fclweb.net
acquiastage.flightcentre.co.nz
flightcentre.fctggiftcards.com
securepay.flightcentre.co.uk
acquiastage.fcfoundation.org.au
apac.qualityportal.fctg.travel
consultant-stg.keytotheworld.com.au
my.travelmoneyoz.com
www.travel-associates.co.nz
www.cruiseabout.co.nz
www.travelexpo.net.au
partner.flightcentre.com.au
acquiastage.travelmoney.co.nz
acquiastage.fctravelclub.com.au
www.flightcentre.com.hk
acquiastage.infinityholidays.com.au
acquiastage.travel-associates.com.au
stg-securepay.universaltraveller.com.au
www.flightcentre.co.za

Other certificates including the domain name flightcentre.com

(limited to 100 certificates)
*.us.flightcentre.com
acquiaprod.flitech.net
admin.4dconsulting.com.au
acquiastage.flightcentre.com.au
prod.1.slot.cdn.salesforce-communities.com
acquiastage.flightcentre.com.au
acquiadev.flitech.net
prod.1.slot.cdn.salesforce-communities.com
prod.1.slot.cdn.salesforce-communities.com
www.cievents.com.au
o.us.flightcentre.com
www.cievents.com.au
www.cievents.com.au
www.cievents.com.au
www.cievents.com.au
acquiaprod.flitech.net
www.cievents.com.au
acquiadev.flitech.net
alerts.flightcentre.com.au
prod.1.slot.cdn.salesforce-communities.com
prod.1.slot.cdn.salesforce-communities.com
www.flightcentre.com
www.studentflights.com.au
acquiaprod.flitech.net
acquiaprod.flitech.net
prod.1.slot.cdn.salesforce-communities.com
dev-account.flightcentre.com.au
www.cievents.com.au
acquiadev.flitech.net
acquiaprod.flitech.net
www.flightcentre.com
acquiaprod.flitech.net
prod.1.slot.cdn.salesforce-communities.com
acquiatest.4dconsulting.com.au
acquiaprod.flitech.net
www.cievents.com.au
acquiaprod.flitech.net
www.flightcentre.com
www.cievents.com.au
prod.1.slot.cdn.salesforce-communities.com
acquiaprod.flitech.net
acquiastage.ao.fclmedia.com
*.am.flightcentre.com
stg-account.flightcentre.com.au
acquiaprod.flitech.net
acquiadev.flitech.net
www.flightcentre.com
acquiadev.4dconsulting.com.au
prod.1.slot.cdn.salesforce-communities.com
webmail.us.flightcentre.com
www.cievents.com.au
*.us.flightcentre.com
www.cievents.com.au
acquiatest.flitech.net
www.cievents.com.au
www.flightcentre.com
prod.1.slot.cdn.salesforce-communities.com
account.flightcentre.com.au
www.flightcentre.com
prod.1.slot.cdn.salesforce-communities.com
acquiastage.ao.fclmedia.com
acquiatest.4dconsulting.com.au
alerts.flightcentre.com.au
www.flightcentre.com
prod.1.slot.cdn.salesforce-communities.com
acquiatest.flitech.net
acquiaprod.flitech.net
www.cievents.com.au
www.cievents.com.au
acquiaprod.flitech.net
www.flightcentre.com
www.flightcentre.com
www.flightcentre.com
admin.4dconsulting.com.au
www.studentflights.com.au
www.studentflights.com.au
o.us.flightcentre.com
alerts.flightcentre.com.au
www.cievents.com.au
prod.1.slot.cdn.salesforce-communities.com
www.flightcentre.com
acquiadev.4dconsulting.com.au
prod.1.slot.cdn.salesforce-communities.com
acquiadev.flitech.net
www.cievents.com.au
www.cievents.com.au
admin.4dconsulting.com.au
prod.1.slot.cdn.salesforce-communities.com
www.cievents.com.au
prod.1.slot.cdn.salesforce-communities.com
admin.4dconsulting.com.au
acquiaprod.flitech.net
www.cievents.com.au
acquiastage.flightcentre.com.au
prod.1.slot.cdn.salesforce-communities.com
prod.1.slot.cdn.salesforce-communities.com
www.flightcentre.com
www.flightcentre.com
alerts.flightcentre.com.au
www.flightcentre.com

Certificate

The complete raw certificate details for www.flightcentre.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNE545U9wNLePyoq8XMa
T9cPZAT63AcvyGjIpC61eEE3GrlaOxg02UFYRJwcjjBmbcstkxgAfuVnLS9JRJiM
OyDEDRy+btD2DWQgRvcufegVYv2QpdbW8BO6Rf3micFUnkcD1KxUlx03+kyK7U53
Zy5Eok7FcJv40OaH34ai2al+yUQdZ0aamHcn6jqcgFeskhjYHC1qOdo5GkiSBo1D
3pUEs81DfUnU9wNRs92CERp68/1emX3iLDUzjCm7LY/L8sugz3jz+RDpmyAhuca2
wvRwU7z6QW7eHffkHY0dBKbMdlhB3PA8jWOo04Qdzub9Gb0oencjY/85Vu/PWn0L
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6841453285015128349990580560633084912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queensland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Brisbane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Flight Centre Travel Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.flightcentre.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21311208483773465135583180348102998449770223057816119309024609036032339544847440055073003406518298578807569969957797078406873899683283921199879495914948605500868824913351240328704331698225921587037993607030234848337970037953178884844350963894624913011208074530055827464016997681992397443604376724665572503923481813058519567303494076021914214814596044688389180290531154724804303177208720718076871832292104494198148767378759173112300225719597084191370385996400382551765671993030999080400081759517915449673737658838189132002096620482002213907688992185974305667108806420754824800089221754019466235969117451610744508189557
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f672c79e55c27f16f029a5a4995d821a9cdf621
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.escapetravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepay.universaltraveller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travel-associates.fctggiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepay.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultant-stg.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelassociates.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruises.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aplusloyalty.campustravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultant.keytotheworld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.cruiseabout.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-reservations.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-stg.keytotheworld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultant.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel-associates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.studentflights.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cruises.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporate.fctggiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelassociates.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecaqa.libertytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.roundtheworldexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universaltraveller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eca.flightcentre.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universaltraveller.fctggiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentre.fctggiftregistry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityholidays.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.4dconsulting.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campustravel.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.qualityportal.fctg.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.myadventuretravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eca.libertytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amer.qualityportal.fctg.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'studentuniverse.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.gapyear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-stg.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctravelclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roundtheworldexperts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepay.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelassociates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-stg.keytotheworld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentreireland.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eca.travelassociates.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.keytotheworld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.onefcm.fcm.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eca.qa.libertytravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.flightcentre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.travelmoneygroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flipboard.aws.fclweb.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.flightcentre.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightcentre.fctggiftcards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securepay.flightcentre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.fcfoundation.org.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.qualityportal.fctg.travel'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultant-stg.keytotheworld.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.travelmoneyoz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travel-associates.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cruiseabout.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travelexpo.net.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.flightcentre.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.travelmoney.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.fctravelclub.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.infinityholidays.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquiastage.travel-associates.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-securepay.universaltraveller.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flightcentre.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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