www.fareportal.com

- FarePortal Inc -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:93:55:c6:f2:94:7c:13:96:3c:69:bc:66:ac:71:25 was issued on by DigiCert Inc.

With 68 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FarePortal Inc

Organization: FarePortal Inc
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:93:55:c6:f2:94:7c:13:96:3c:69:bc:66:ac:71:25
Serial Number (int): 14057287363121145939583061449190961445
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:c0:e0:04:5d:46:48:17:21:55:33:e6:a7:2d:87:e7:5c:80:ab:09
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): c2:11:c4:ca:27:d7:c3:47:cd:c3:98:9d:e2:b2:40:eb:ef:b4:f5:c2
Fingerprint (sha256): 73:9a:99:bc:23:ba:05:0f:6d:65:13:d8:60:e7:24:5d:45:9f:cc:e7:35:f7:ab:fe:26:a9:d3:22:c0:b2:a0:7c

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.fareportal.com

68

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fareportal.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.fareportal.com
airlineloyaltyapi.fareportal.com
ancillaryselectionapi.fareportal.com
botserviceapi.fareportal.com
c.cheapoair.ca
c.cheapoair.co.uk
c.cheapoair.com
c.fareportal.com
cheapoair.ca
cheapoair.co.uk
cheapostay.com
clubmiles.com
commoncontentapi.fareportal.com
dev.cheapoair.ca
dev.cheapoair.co.uk
dev.cheapoair.com
dev.cheapoair.mx
dev.insanelycheapflights.com
dev.onetravel.com
digitalconfigurationapi.fareportal.com
digitalscreenshotapi.fareportal.com
emailsender.fareportal.com
fareportal.com
fpwebbox-uk.fareportal.com
intellisuggest.fareportal.com
intellisuggestca.fareportal.com
intellisuggestuk.fareportal.com
m.cheapoair.ca
m.cheapoair.co.uk
mbeta.cheapoair.ca
mbeta.cheapoair.co.uk
mbeta.cheapoair.com
mbeta.onetravel.com
mdev.cheapoair.ca
mdev.cheapoair.co.uk
mdev.cheapoair.com
mdev.cheapoair.mx
mdev.insanelycheapflights.com
mdev.onetravel.com
mstaging.cheapoair.ca
mstaging.cheapoair.co.uk
mstaging.cheapoair.com
mstaging.cheapoair.mx
mstaging.insanelycheapflights.com
mstaging.onetravel.com
mtest.cheapoair.ca
mtest.cheapoair.co.uk
mtest.cheapoair.com
mtest.cheapoair.mx
mtest.insanelycheapflights.com
mtest.onetravel.com
napaapi.fareportal.com
needhelpapi.fareportal.com
onetravel.com
staging.cheapoair.ca
staging.cheapoair.co.uk
staging.cheapoair.com
staging.cheapoair.mx
staging.insanelycheapflights.com
staging.onetravel.com
test.cheapoair.ca
test.cheapoair.co.uk
test.cheapoair.com
test.cheapoair.mx
test.insanelycheapflights.com
test.onetravel.com
www.cheapoair.ca
www.cheapoair.co.uk

Other certificates including the domain name fareportal.com

(limited to 100 certificates)
www.fareportal.com
*.fareportal.com
ds.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
azure.fareportal.com
azure.fareportal.com
www.fareportal.com
webservices.fareportal.com
*.fareportal.com
azure.fareportal.com
azure.fareportal.com
www.fareportal.com
rdsindia3.fareportal.com
fpwebbox.fareportal.com
fpwebbox.fareportal.com
www.fareportal.com
www.fareportal.com
chef.fareportal.com
rdsindia3.fareportal.com
www.fareportal.com
*.azure.fareportal.com
www.fareportal.com
www.fareportal.com
ra.fareportal.com
*.fareportal.com
*.fareportal.com
*.fareportal.com
fp-a-expedge.fareportal.com
www.fareportal.com
fp-a-expedge.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
launchpadapiassignment.azure.fareportal.com
www.fareportal.com
www.fareportal.com
*.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
ivr.fareportal.com
rdsindia3.fareportal.com
ds.fareportal.com
ra.fareportal.com
slan.fareportal.com
*.fareportal.com
www.fareportal.com
www.fareportal.com
www.fareportal.com
ds.fareportal.com
ds.fareportal.com
azure.fareportal.com
*.fareportal.com
www.fareportal.com
mobile-xml.fareportal.com
www.fareportal.com
*.fareportal.com

Certificate

The complete raw certificate details for www.fareportal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMjjCCC3agAwIBAgIQCpNVxvKUfBOWPGm8ZqxxJTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzA3MjcwMDAwMDBaFw0yNDA3MjYyMzU5NTlaMGkxCzAJBgNVBAYTAlVTMREw
DwYDVQQIEwhOZXcgWW9yazERMA8GA1UEBxMITmV3IFlvcmsxFzAVBgNVBAoTDkZh
cmVQb3J0YWwgSW5jMRswGQYDVQQDExJ3d3cuZmFyZXBvcnRhbC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZUS7sIL7gEbpmxb1EE3Apm42ef101
SzyIORSOa8Z58a2Afxa0B3XRI2+UfhCZstq2YjMAn456QlYAK93Kxvsm0LDvSbia
UISkXR/rpUztoLEfvwSdYHlDtu28OQwpE1LWxxGy6J3KWaUIpfNthIjZBszubt/I
QMBivb6MkVy2jNZMeZudjv+a2zOj6MIDih9JIBblaIcKH5K/l70W0KVcjYKBnGNd
S7YnlctyhD5lWXvaWnLjkbjFVZYXvU9JTwXLJja+8yAWw8n44X0KXl2MAf04WbA9
QEZhRfLxvm1/sjkhdUN2bbZDVLTHeQGd0pZQBAcrv36ip4fWtStjizQxAgMBAAGj
ggk7MIIJNzAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5sxTAdBgNVHQ4E
FgQUwcDgBF1GSBchVTPmpy2H51yAqwkwggZABgNVHREEggY3MIIGM4ISd3d3LmZh
cmVwb3J0YWwuY29tgiBhaXJsaW5lbG95YWx0eWFwaS5mYXJlcG9ydGFsLmNvbYIk
YW5jaWxsYXJ5c2VsZWN0aW9uYXBpLmZhcmVwb3J0YWwuY29tghxib3RzZXJ2aWNl
YXBpLmZhcmVwb3J0YWwuY29tgg5jLmNoZWFwb2Fpci5jYYIRYy5jaGVhcG9haXIu
Y28udWuCD2MuY2hlYXBvYWlyLmNvbYIQYy5mYXJlcG9ydGFsLmNvbYIMY2hlYXBv
YWlyLmNhgg9jaGVhcG9haXIuY28udWuCDmNoZWFwb3N0YXkuY29tgg1jbHVibWls
ZXMuY29tgh9jb21tb25jb250ZW50YXBpLmZhcmVwb3J0YWwuY29tghBkZXYuY2hl
YXBvYWlyLmNhghNkZXYuY2hlYXBvYWlyLmNvLnVrghFkZXYuY2hlYXBvYWlyLmNv
bYIQZGV2LmNoZWFwb2Fpci5teIIcZGV2Lmluc2FuZWx5Y2hlYXBmbGlnaHRzLmNv
bYIRZGV2Lm9uZXRyYXZlbC5jb22CJmRpZ2l0YWxjb25maWd1cmF0aW9uYXBpLmZh
cmVwb3J0YWwuY29tgiNkaWdpdGFsc2NyZWVuc2hvdGFwaS5mYXJlcG9ydGFsLmNv
bYIaZW1haWxzZW5kZXIuZmFyZXBvcnRhbC5jb22CDmZhcmVwb3J0YWwuY29tghpm
cHdlYmJveC11ay5mYXJlcG9ydGFsLmNvbYIdaW50ZWxsaXN1Z2dlc3QuZmFyZXBv
cnRhbC5jb22CH2ludGVsbGlzdWdnZXN0Y2EuZmFyZXBvcnRhbC5jb22CH2ludGVs
bGlzdWdnZXN0dWsuZmFyZXBvcnRhbC5jb22CDm0uY2hlYXBvYWlyLmNhghFtLmNo
ZWFwb2Fpci5jby51a4ISbWJldGEuY2hlYXBvYWlyLmNhghVtYmV0YS5jaGVhcG9h
aXIuY28udWuCE21iZXRhLmNoZWFwb2Fpci5jb22CE21iZXRhLm9uZXRyYXZlbC5j
b22CEW1kZXYuY2hlYXBvYWlyLmNhghRtZGV2LmNoZWFwb2Fpci5jby51a4ISbWRl
di5jaGVhcG9haXIuY29tghFtZGV2LmNoZWFwb2Fpci5teIIdbWRldi5pbnNhbmVs
eWNoZWFwZmxpZ2h0cy5jb22CEm1kZXYub25ldHJhdmVsLmNvbYIVbXN0YWdpbmcu
Y2hlYXBvYWlyLmNhghhtc3RhZ2luZy5jaGVhcG9haXIuY28udWuCFm1zdGFnaW5n
LmNoZWFwb2Fpci5jb22CFW1zdGFnaW5nLmNoZWFwb2Fpci5teIIhbXN0YWdpbmcu
aW5zYW5lbHljaGVhcGZsaWdodHMuY29tghZtc3RhZ2luZy5vbmV0cmF2ZWwuY29t
ghJtdGVzdC5jaGVhcG9haXIuY2GCFW10ZXN0LmNoZWFwb2Fpci5jby51a4ITbXRl
c3QuY2hlYXBvYWlyLmNvbYISbXRlc3QuY2hlYXBvYWlyLm14gh5tdGVzdC5pbnNh
bmVseWNoZWFwZmxpZ2h0cy5jb22CE210ZXN0Lm9uZXRyYXZlbC5jb22CFm5hcGFh
cGkuZmFyZXBvcnRhbC5jb22CGm5lZWRoZWxwYXBpLmZhcmVwb3J0YWwuY29tgg1v
bmV0cmF2ZWwuY29tghRzdGFnaW5nLmNoZWFwb2Fpci5jYYIXc3RhZ2luZy5jaGVh
cG9haXIuY28udWuCFXN0YWdpbmcuY2hlYXBvYWlyLmNvbYIUc3RhZ2luZy5jaGVh
cG9haXIubXiCIHN0YWdpbmcuaW5zYW5lbHljaGVhcGZsaWdodHMuY29tghVzdGFn
aW5nLm9uZXRyYXZlbC5jb22CEXRlc3QuY2hlYXBvYWlyLmNhghR0ZXN0LmNoZWFw
b2Fpci5jby51a4ISdGVzdC5jaGVhcG9haXIuY29tghF0ZXN0LmNoZWFwb2Fpci5t
eIIddGVzdC5pbnNhbmVseWNoZWFwZmxpZ2h0cy5jb22CEnRlc3Qub25ldHJhdmVs
LmNvbYIQd3d3LmNoZWFwb2Fpci5jYYITd3d3LmNoZWFwb2Fpci5jby51azAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1Ud
HwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNB
Q0EyMDE4LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhto
dHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwdQYIKwYBBQUHAQEEaTBnMCYGCCsG
AQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYx
aHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNy
dDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk1dsa
zsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYmWZQ5EAAAEAwBHMEUCIBJ9IXBW
3AjjRu/vpJKiHIrQ30SA3uXzcWHy6wYD+gCXAiEA62N6bD5FWMznbOeuvLtNwf56
hen7hetrjdrlW7DIM2kAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAYmWZQ47AAAEAwBHMEUCIQDKf3wU9PgXaJtMk8r3fWM+MiB6bsrnn1Bbnwmf
PYKuWwIgA6QLcr87idr9Rmw+a39LV35I0aeD5sv9FMXwRLQM3WAAdgDatr9rP7W2
Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmWZQ3sAAAEAwBHMEUCIGPnTbbB
i2J2kIlu0o6F++h0ZCjO5BjiYk9l11sSltxAAiEA1WZZVZBD83oC5sDTFn60xXdG
h2Jxz683K3tFzr10szEwDQYJKoZIhvcNAQELBQADggEBAFmvVWfPOBPZdoHlmDOP
GD2dcktj8OI1phh5z8J5T8vsrp66tkFWFXVLU8C+xWOAIPUUf/tH48jLhVmzsMm2
IJR8e5DDgrvmQc64JQdTChZEhlYjF+LHHxQ679bFs0NxaBtGmlehFr/Hrlw7Dp+q
NbTOLPB6PIVMwL4MgHUAV+VjyVLCAGW1Y8SmkPZZuVE39C7FFy4B8UhNuwEzFiu6
Kze89SH6GOuetCmAzFCPkCAqbyKj/PRx3HIk5+az+QVyhGZ+A7KRIrDaddg4Tj9Y
mIW7pWktX3aT+yDs49VZ66tWbQKiIDAtvmUhdP2gKpJetBEMpOW+Sejwk5De15Eg
iTA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVEu7CC+4BG6ZsW9RBNw
KZuNnn9dNUs8iDkUjmvGefGtgH8WtAd10SNvlH4QmbLatmIzAJ+OekJWACvdysb7
JtCw70m4mlCEpF0f66VM7aCxH78EnWB5Q7btvDkMKRNS1scRsuidylmlCKXzbYSI
2QbM7m7fyEDAYr2+jJFctozWTHmbnY7/mtszo+jCA4ofSSAW5WiHCh+Sv5e9FtCl
XI2CgZxjXUu2J5XLcoQ+ZVl72lpy45G4xVWWF71PSU8FyyY2vvMgFsPJ+OF9Cl5d
jAH9OFmwPUBGYUXy8b5tf7I5IXVDdm22Q1S0x3kBndKWUAQHK79+oqeH1rUrY4s0
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14057287363121145939583061449190961445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FarePortal Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fareportal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19354493632414666321138423406994327453981753267370631611550711386345404055881076432917305015890731120802449329547658278751031844364512641333102535020472061652953576321236162531996009302957398486106595858233331732983236952393996656407305977437410823405767859889782537956752757990220285378318135997430693492154043213008768587522955833307899672144999575146424192616541057554226241690748000855874319973311884472619028081167369327182190242628262066892155963089071377144200412626731865260453156411334049964847767462465015694408868036003808109741769948135443808134056633873965603585659874709308554644776881763974623907230769
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c1c0e0045d464817215533e6a72d87e75c80ab09
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1591 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airlineloyaltyapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ancillaryselectionapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'botserviceapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheapostay.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubmiles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoncontentapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalconfigurationapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalscreenshotapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emailsender.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fpwebbox-uk.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellisuggest.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellisuggestca.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intellisuggestuk.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbeta.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbeta.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbeta.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbeta.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdev.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mstaging.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mtest.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'napaapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needhelpapi.fareportal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cheapoair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cheapoair.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.insanelycheapflights.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.onetravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapoair.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheapoair.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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