secure.switchfly.com

Issued by Sectigo RSA Domain Validation Secure Server CA

About this certificate

This digital certificate with serial number be:ec:df:30:9a:62:af:25:0a:53:c8:07:3b:21:b2:84 was issued on by Sectigo Limited.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.switchfly.com

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): be:ec:df:30:9a:62:af:25:0a:53:c8:07:3b:21:b2:84
Serial Number (int): 253783228085821643519466848768839758468
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f2:03:50:0e:46:1a:74:81:77:8a:d7:f2:57:ae:6f:7e:f9:c6:2a:1e
AuthorityKeyId: 8d:8c:5e:c4:54:ad:8a:e1:77:e9:9b:f9:9b:05:e1:b8:01:8d:61:e1

Fingerprint (sha1): 1d:9c:90:42:fb:65:65:16:35:30:35:3a:47:d6:be:65:48:99:be:ba
Fingerprint (sha256): 6f:36:0f:04:4e:05:65:10:07:03:63:e5:24:4d:ed:1d:b5:77:9c:e6:f0:7b:2b:d1:e2:6e:2e:8c:24:34:7e:e0

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com

Check the revocation status for certificate secure.switchfly.com

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.switchfly.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure.switchfly.com
adm.royalorchidholidays.com
aereo.tamembarqueja.com.br
agent.aavacations.com
agents.i-compare.co.nz
air.useaamiles.com
au.jalvacations.jal.co.jp
aviosandmoney.iberia.com
b2b.tamviagens.com.br
b2bmastercard.tamviagens.com.br
b2c.tamviagens.com.br
book.aavacations.com
book.royalorchidholidays.com
booking.easytahiti.com
booking.norwegianholidays.com
ca.jalvacations.jal.co.jp
carawards.mileageplus.com
carhotel.useaamiles.com
carsanywhere.ihg.com
collectonhotelscarsandmore.avios.com
collectonhotelscarsandmore.ba.com
flightsanywhere.ihg.com
hk.jalvacations.jal.co.jp
hotelplanner.aavacations.com
hotelsanywhere.ihg.com
hotelscarsandmore.avios.com
id.jalvacations.jal.co.jp
kr.jalvacations.jal.co.jp
marriott.atlantisbahamas.com
my.jalvacations.jal.co.jp
pacotes.tamviagens.com.br
partner.royalorchidholidays.com
reservacorporativo.clubpremier.com
reservations.clubpremier.com
roh.royalorchidholidays.com
secure.atlantisbahamas.com
secure.myatlantisvacation.com
servicoturisticos.tamembarqueja.com.br
sg.jalvacations.jal.co.jp
shopping.copaair.com
travellatampass.lan.com
travelmarketplace.delta.com
tw.jalvacations.jal.co.jp
us.jalvacations.jal.co.jp
vn.jalvacations.jal.co.jp
wine.avios.com
www.airandcar.espanol.marriott.com
www.airandcar.marriott.co.jp
www.airandcar.marriott.co.uk
www.airandcar.marriott.com
www.airandcar.marriott.com.au
www.airandcar.marriott.com.cn
www.airandcar.marriott.de
www.airandcar.marriott.fr
www.airandcar.marriott.it
www.airandcar.marriott.pt
www.fctgpremium.com.au
www.fctgquicksearch.com
www.fctgyouth.com.au
www.hotelsandcars.ba.com
www.i-compare.co.nz
www.infinityindustrypartners.com.au
www.wine.ba.com

Other certificates including the domain name switchfly.com

(limited to 100 certificates)
*.switchfly.com
*.switchfly.com
*.v184test.switchfly.com
*.v201test.switchfly.com
*.switchfly.com
secure.switchfly.com
switchfly.com
secure.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.switchfly.com
*.v195test.switchfly.com
secure.switchfly.com
*.testjack2.core-test.switchfly.com
*.staging.switchfly.com
*.switchfly.com
*.v192test.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.qa3.switchfly.com
atlantispi.switchfly.com
switchfly.com
secure.switchfly.com
*.v143test.switchfly.com
secure.switchfly.com
*.switchfly.com
secure.switchfly.com
*.v193test.switchfly.com
secure.switchfly.com
*.v172test.switchfly.com
ancillary.switchfly.com
*.staging.switchfly.com
ds-operations.ds.core-test.switchfly.com
analytics.switchfly.com
*.v183test.switchfly.com
b2b.tamviagens.com.br
*.v195test.switchfly.com
switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.staging.switchfly.com
*.v192test.switchfly.com
*.v193test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.aws-internal.switchfly.com
*.switchfly.com
secure.switchfly.com
*.qa1.switchfly.com
*.v185test.switchfly.com
employee.switchfly.com
*.v162test.switchfly.com
www.switchfly.com
secure.switchfly.com
*.v194test.switchfly.com
secure.switchfly.com
ds-amit.ds.core-test.switchfly.com
secure.switchfly.com
*.v175test.switchfly.com
*.switchfly.com
*.switchfly.com
secure.switchfly.com
secure.switchfly.com
*.iktst.core-test.switchfly.com
*.switchfly.com
*.v154test.switchfly.com
*.v194test.switchfly.com
*.qa3.switchfly.com
secure.switchfly.com
*.v163test.switchfly.com
*.uat.switchfly.com
*.switchfly.com
ancillary.switchfly.com
britishairways.switchfly.com
switchfly.com
*.v165test.switchfly.com
secure.switchfly.com
*.v192test.switchfly.com
*.switchfly.com
*.v181test.switchfly.com
*.aws.switchfly.com
www.switchfly.com
*.staging.switchfly.com
*.v164test.switchfly.com
*.uat.switchfly.com
americanexpress.switchfly.com
ancillary.switchfly.com
secure.switchfly.com
*.v151test.switchfly.com
switchfly.com
ancillary.switchfly.com
*.v121test.switchfly.com
*.switchfly.com
*.uat.switchfly.com
secure.switchfly.com
*.v182test.switchfly.com
*.v191test.switchfly.com
*.switchfly.com

Certificate

The complete raw certificate details for secure.switchfly.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpRQQCANwIeXjeU42Tq6
UnNnxcsUYfYJFscH531KwSvUNUVR//SwDz+w9InITbZAhBt6lCK0T0d56KgPUzXG
1Fiv4lN4IMyv202k2sv1xTeckY3HtMrWYYP7f8bok/y3Dyqh3C0DvXjj5LqG+vlJ
7iHl2yhVfbnVJAaRseWv69jmFwFW07uF06h/VqAGIo0LaWPAM7imWcJMypGVPZ+r
liEd/ppz3EnjVDY8RH+4ekgzz3ALA6sVh6O/wEeZ0lTmVEh2+KIfGDlO4tJwX2mD
0eyCatAqRcSkXIqsKn6DBkKQXJdFMi6aVIsocRJnZ2cRzmlhXbMhxB0Qe7NOeygr
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 253783228085821643519466848768839758468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Domain Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.switchfly.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23048507605877583018608184625758394093924244847416680480376211051839289789538918812070798453742478621485662495548136958949222817898547705140031237132447767319449836979115602757476465507813552320639480058783658284882702571743372639611970427757978475671410207551026719526617258376532940601753754147630387953349978337670446199417070832936146839471266521079116688599552020209643475740011452945980161516132878952069558502334655437030831308808443041480313610797359728220204270500472052031756366217944485366884525427021784911177146870865658289521209593536538853162433946097096484416870578399981326069407415390975907104041747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8d8c5ec454ad8ae177e99bf99b05e1b8018d61e1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f203500e461a7481778ad7f257ae6f7ef9c62a1e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSADomainValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1729 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.switchfly.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adm.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aereo.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agent.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agents.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'air.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviosandmoney.iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2bmastercard.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2c.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'book.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.easytahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.norwegianholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carawards.mileageplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carhotel.useaamiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectonhotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collectonhotelscarsandmore.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hk.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelplanner.aavacations.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelsanywhere.ihg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hotelscarsandmore.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'id.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kr.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marriott.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pacotes.tamviagens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partner.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservacorporativo.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reservations.clubpremier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roh.royalorchidholidays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.atlantisbahamas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.myatlantisvacation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicoturisticos.tamembarqueja.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shopping.copaair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travellatampass.lan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelmarketplace.delta.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tw.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vn.jalvacations.jal.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wine.avios.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.espanol.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airandcar.marriott.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctgpremium.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctgquicksearch.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fctgyouth.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hotelsandcars.ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-compare.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.infinityindustrypartners.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wine.ba.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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