mediapack.groupleisureandtravel.com

Issued by Starfield Secure Certificate Authority - G2

About this certificate

This digital certificate with serial number ef:b8:89:dd:91:64:69:40 was issued on by Starfield Technologies, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=mediapack.groupleisureandtravel.com,OU=Domain Control Validated

Starfield Technologies, Inc.

Organization: Starfield Technologies, Inc.
Organization unit: http://certs.starfieldtech.com/repository/
State / Province: Arizona
Locality: Scottsdale
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:b8:89:dd:91:64:69:40
Serial Number (int): 17273707955499592000
Serial Number lenght: 64 bits, 8 octets

SubjectKeyId: 69:b9:6d:52:51:04:28:8c:1b:44:09:b1:21:1f:1f:be:d5:95:fa:24
AuthorityKeyId: 25:45:81:68:50:26:38:3d:3b:2d:2c:be:cd:6a:d9:b6:3d:b3:66:63

Fingerprint (sha1): 66:91:ec:98:0b:b6:ae:13:ed:1c:3e:a7:f3:e0:81:5d:16:54:75:6b
Fingerprint (sha256): 97:79:9c:2b:43:35:1f:e0:a4:86:ee:d5:20:fc:bb:d9:e7:fe:4c:ee:e1:c6:bd:5b:79:32:c5:86:6d:27:fc:ae

Issuing Certificate URL: http://certificates.starfieldtech.com/repository/sfig2.crt

Revocation information

OCSP Server: http://ocsp.starfieldtech.com/
CRL Distribution Point: http://crl.starfieldtech.com/sfig2s1-147.crl

Check the revocation status for certificate mediapack.groupleisureandtravel.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mediapack.groupleisureandtravel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mediapack.groupleisureandtravel.com
www.mediapack.groupleisureandtravel.com

Other certificates including the domain name groupleisureandtravel.com

(limited to 100 certificates)
dg-0070-c174270.client-tls.adestra.com
schooltravelorganiser.com
adfe2.abasoft.co.uk
www.groupleisureandtravel.com
forms.blackbx.io
forms.grupoplustech.com
forms.gaa.aero
adfe2.abasoft.co.uk
adfe2.abasoft.co.uk
dg-0070-c174270.client-tls.adestra.com
forms.blackbx.io
adfe2.abasoft.co.uk
dg-0070-c174270.client-tls.adestra.com
meatmanagement.com
dg-0070-c174270.client-tls.adestra.com
form.diversitykobo.org
forms.gaa.aero
reparatur.mikrosat.org
forms.gaa.aero
forms.seedformations.co.uk
wvfe1.webvisioncloud.com
adfe2.abasoft.co.uk
adfe2.abasoft.co.uk
forms.everreadyautoglass.com
adfe2.abasoft.co.uk
forms.gaa.aero
wvfe1.webvisioncloud.com
dg-0070-c174270.client-tls.adestra.com
dg-0070-c174270.client-tls.adestra.com
wvfe1.webvisioncloud.com
adfe2.abasoft.co.uk
adfe2.abasoft.co.uk
dg-0070-c174270.client-tls.adestra.com
solicitudes.wtocorp.com
forms.gaa.aero
wvfe1.webvisioncloud.com
forms.gaa.aero
adfe2.abasoft.co.uk
forms.groupleisureandtravel.com
forms.groupleisureandtravel.com
forms.blackbx.io
adfe2.abasoft.co.uk
adfe2.abasoft.co.uk
wvfe1.webvisioncloud.com
forms.coloradotirestorage.com
wvfe1.webvisioncloud.com
meatmanagement.com
forms.blackbx.io
forms.gaa.aero
dg-0070-c174270.client-tls.adestra.com
www.bachatavida.com
adfe2.abasoft.co.uk
adfe2.abasoft.co.uk
forms.blackbx.io
forms.gaa.aero
forms.blackbx.io
dg-0110-3c545c5.client-tls.adestra.com
wvfe1.webvisioncloud.com
dg-0070-c174270.client-tls.adestra.com
forms.blackbx.io
advertising.groupleisureandtravel.com
membership.labspot.com
wvfe1.webvisioncloud.com
adfe2.abasoft.co.uk
wvfe1.webvisioncloud.com
forms.gaa.aero
dg-0070-c174270.client-tls.adestra.com
wvfe1.webvisioncloud.com
contact.labspot.com
wvfe1.webvisioncloud.com
wvfe1.webvisioncloud.com
advertising.groupleisureandtravel.com
mediapack.groupleisureandtravel.com
advertising.groupleisureandtravel.com
forms.rockymountainroll.com
dg-0070-c174270.client-tls.adestra.com
forms.hansenmigration.com.au
forms.blackbx.io
adfe2.abasoft.co.uk
advertising.groupleisureandtravel.com
adfe2.abasoft.co.uk
forms.blackbx.io
adfe2.abasoft.co.uk
response.eviseintl.com
booking.ohanacruises.com
forms.gaa.aero
adfe2.abasoft.co.uk
dg-0070-c174270.client-tls.adestra.com
forms.landmarkhomes.ca
forms.gaa.aero
forms.olf.ch
forms.blackbx.io
forms.coloradotirestorage.com
wvfe1.webvisioncloud.com
forms.rotix.com
forms.dr-giaroli.org
adfe2.abasoft.co.uk
forms.ecosunhomes.com
wvfe1.webvisioncloud.com
www.groupleisureandtravel.com

Certificate

The complete raw certificate details for mediapack.groupleisureandtravel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGqjCCBZKgAwIBAgIJAO+4id2RZGlAMA0GCSqGSIb3DQEBCwUAMIHGMQswCQYD
VQQGEwJVUzEQMA4GA1UECBMHQXJpem9uYTETMBEGA1UEBxMKU2NvdHRzZGFsZTEl
MCMGA1UEChMcU3RhcmZpZWxkIFRlY2hub2xvZ2llcywgSW5jLjEzMDEGA1UECxMq
aHR0cDovL2NlcnRzLnN0YXJmaWVsZHRlY2guY29tL3JlcG9zaXRvcnkvMTQwMgYD
VQQDEytTdGFyZmllbGQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSAtIEcy
MB4XDTE5MDIxMTE1NTEwN1oXDTIwMDIxMTE1NTEwN1owUTEhMB8GA1UECxMYRG9t
YWluIENvbnRyb2wgVmFsaWRhdGVkMSwwKgYDVQQDEyNtZWRpYXBhY2suZ3JvdXBs
ZWlzdXJlYW5kdHJhdmVsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJm2NPxCvzk3B5bIL4kc51R1jyLqZVf0n4ajer4h5MVhXgnn3iK0fihZz+c
rSxPmyCThYlgtd57M5Qs6Ifd7xxSkFM71P0fGBg8FBD7D7Id8aT4p6Ug/qC8/24V
Z3/1yEe/8elqq2MklookW/ry7hjrukBwt/9XpXS6D4fQZlgjxZ+OR5q0gXvFtJat
xSCfnOsGiI0xmmTSSsMb9qTrb6hB27DvYS/+fQ5bPnrDYJbbuUvMmOCCRxYSf1fM
i/XDu3IODIMrrAbD2yF/EUV+/ih02OYZmqH/X6NUPRmLJAk891C3eQQig7Yk3/Vt
PY73ZUgyYA6RyRWwDCCUbqvT+mcCAwEAAaOCAw0wggMJMAwGA1UdEwEB/wQCMAAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMA4GA1UdDwEB/wQEAwIFoDA9
BgNVHR8ENjA0MDKgMKAuhixodHRwOi8vY3JsLnN0YXJmaWVsZHRlY2guY29tL3Nm
aWcyczEtMTQ3LmNybDBjBgNVHSAEXDBaME4GC2CGSAGG/W4BBxcBMD8wPQYIKwYB
BQUHAgEWMWh0dHA6Ly9jZXJ0aWZpY2F0ZXMuc3RhcmZpZWxkdGVjaC5jb20vcmVw
b3NpdG9yeS8wCAYGZ4EMAQIBMIGCBggrBgEFBQcBAQR2MHQwKgYIKwYBBQUHMAGG
Hmh0dHA6Ly9vY3NwLnN0YXJmaWVsZHRlY2guY29tLzBGBggrBgEFBQcwAoY6aHR0
cDovL2NlcnRpZmljYXRlcy5zdGFyZmllbGR0ZWNoLmNvbS9yZXBvc2l0b3J5L3Nm
aWcyLmNydDAfBgNVHSMEGDAWgBQlRYFoUCY4PTstLL7Natm2PbNmYzBXBgNVHREE
UDBOgiNtZWRpYXBhY2suZ3JvdXBsZWlzdXJlYW5kdHJhdmVsLmNvbYInd3d3Lm1l
ZGlhcGFjay5ncm91cGxlaXN1cmVhbmR0cmF2ZWwuY29tMB0GA1UdDgQWBBRpuW1S
UQQojBtECbEhHx++1ZX6JDCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AKS5CZC0
GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABaN1BQiEAAAQDAEgwRgIhAL2O
hAhmr44cTLl5pROjfO2yzibLTZ/cJvD4jAFudxaIAiEA8iFnemjHUKIJDD37M34J
+RBP3VdhJ6bPbS7kZu/8ZkIAdwBep3P531bA57U2SH3QSeAyepGaDIShEhKEGHWW
gXFFWAAAAWjdQUPNAAAEAwBIMEYCIQD/486nMs+DM380XpYeggXMVY0mecHlugB2
d8Z10KKgCwIhAJ4EuJ9Ecm3Q2BTR+hKIlu64BTPPV3Gw7taEloDgFR9kMA0GCSqG
SIb3DQEBCwUAA4IBAQA5HhS8r9nzWvgxy96pqOA8YLmYAF0cx1GzWJqR07IjxQ0F
Z5XhRH82LXwTz0YSAnja4X5g0YMwX0sibBQM2s2SjeVN3FtnVJhOp8BfXeWIKVfR
EWMDTjDQIbjhYfBBZudDJfgiD4UvHRRVO0Lw+n7y0+lIypkqV58ucXJ9uoKWPCvc
ctMUmD6XRQCTeHB3uLkwtORfHLAe8uSytpi03oAGVzilYmtX1GYhn5DlMWwex77A
tnne7Mi0Cgc+fRSlyAuZivqYzLszgoBwJHxAzMzPfKJp87UGzmvawtcp4eTrP8TN
+MaDd+/99StLNENwpKvC9MseY92/hiX2Lg+NHdWG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsmbY0/EK/OTcHlsgviRz
nVHWPIuplV/SfhqN6viHkxWFeCefeIrR+KFnP5ytLE+bIJOFiWC13nszlCzoh93v
HFKQUzvU/R8YGDwUEPsPsh3xpPinpSD+oLz/bhVnf/XIR7/x6WqrYySWiiRb+vLu
GOu6QHC3/1eldLoPh9BmWCPFn45HmrSBe8W0lq3FIJ+c6waIjTGaZNJKwxv2pOtv
qEHbsO9hL/59Dls+esNgltu5S8yY4IJHFhJ/V8yL9cO7cg4MgyusBsPbIX8RRX7+
KHTY5hmaof9fo1Q9GYskCTz3ULd5BCKDtiTf9W09jvdlSDJgDpHJFbAMIJRuq9P6
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17273707955499592000
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'http://certs.starfieldtech.com/repository/'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Starfield Secure Certificate Authority - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-11 15:51:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-11 15:51:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mediapack.groupleisureandtravel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22521134021956355195421948288934721471768521366744707863957080498207353530667305537035547421854148626625624966545309189390821810050340741509647944012547926554121438332206754920481747687775414308619784387658364632819323177465002075859819819271412306571656460862521616384436729691892384198736749711377598408388611912618877196330860960173333567979154283018212653785648218343302488960369308689421042778783478250550486520047193551685347777153520151519876440005241580568784600516568761901371950195205122231885489460625894914273093841937066502108685640292274829799335611465393905412818329517215086405097062964378416255859303
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.starfieldtech.com/sfig2s1-147.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114414.1.7.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://certificates.starfieldtech.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.starfieldtech.com/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certificates.starfieldtech.com/repository/sfig2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 254581685026383d3b2d2cbecd6ad9b63db36663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediapack.groupleisureandtravel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediapack.groupleisureandtravel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							69b96d525104288c1b4409b1211f1fbed595fa24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000168dd4142210000040300483046022100bd8e840866af8e1c4cb979a513a37cedb2ce26cb4d9fdc26f0f88c016e771688022100f221677a68c750a2090c3dfb337e09f9104fdd576127a6cf6d2ee466effc66420077005ea773f9df56c0e7b536487dd049e0327a919a0c84a11212841875968171455800000168dd4143cd0000040300483046022100ffe3cea732cf83337f345e961e8205cc558d2679c1e5ba007677c675d0a2a00b0221009e04b89f44726dd0d814d1fa128896eeb80533cf5771b0eed6849680e0151f64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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