vanity-ae.klm.com
- Koninklijke Luchtvaart Maatschappij N.V. -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 0c:d6:47:ae:15:40:d2:c9:ca:89:10:04:f3:cd:03:9f was issued on by COMODO CA Limited.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Koninklijke Luchtvaart Maatschappij N.V.
Organization:
Koninklijke Luchtvaart Maatschappij N.V.
Organization unit: WebSystems
Organization unit: WebSystems
Address:
Amsterdamseweg 55
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:d6:47:ae:15:40:d2:c9:ca:89:10:04:f3:cd:03:9fSerial Number (int): 17063341320505132216000810301749265311
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: a1:06:2b:e5:c6:e2:ae:4d:85:86:64:61:6d:97:a2:4a:6b:b4:35:90
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): 27:27:b2:b6:13:20:75:5e:ce:77:1f:2a:75:38:90:04:8d:9a:8d:7c
Fingerprint (sha256): 00:3a:db:32:c3:e6:f1:90:16:c1:e7:50:56:8f:15:2c:85:86:e6:7c:41:69:7a:b9:26:2f:ad:1d:b7:2e:06:1d
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate vanity-ae.klm.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vanity-ae.klm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vanity-ae.klm.com
ae.klmtakescare.com
ee.klmtakescare.com
ite.klmtakescare.com
ute.klmtakescare.com
vanity-ee.klm.com
vanity-ite.klm.com
vanity-ute.klm.com
www-ae.klmtakescare.com
www-ee.klmtakescare.com
www-ite.klmtakescare.com
www-ute.klmtakescare.com
ae.klmtakescare.com
ee.klmtakescare.com
ite.klmtakescare.com
ute.klmtakescare.com
vanity-ee.klm.com
vanity-ite.klm.com
vanity-ute.klm.com
www-ae.klmtakescare.com
www-ee.klmtakescare.com
www-ite.klmtakescare.com
www-ute.klmtakescare.com
Other certificates including the domain name klm.com
(limited to 100 certificates)
vanity-ae.klm.com
gofuel-acc-ute.klm.com
origin.api.ee1.klm.com
nieuws.klm.com
imperva.com
airlines.api.amadeus.com
kiosk.ute2.klm.com
origin.api.klm.com
*.cf.devnet.klm.com
travel-with-kids.klm.com
campaigndesigner.klm.com
www.iseatz.com
campagnes.klm.com
werelddeal.klm.com
ba.ite2.klm.com
flightguide.klm.com
sustainability.klm.com
materials.klm.com
api.ee1.klm.com
origin.api.ae3.klm.com
flightoffers.klm.com
werelddeal.klm.com
china.klm.com
werelddeal.klm.com
flightoffers.klm.com
getaways.klm.com
flexfares.klm.com
evenweg.klm.com
san1.klmonline.com
flexfares.klm.com
payments.klm.com
flyforward.klm.com
www.klm.com
services2.klm.com
aefederation.klm.com
services.ae1.klm.com
fes-dev.klm.com
flightbundle.klm.com
fes.klm.com
houses.klm.com
evenweg.klm.com
china.klm.com
packyourdestination.klm.com
co2.ehn.klm.com
ehn.klm.com
kiosk.klm.com
san1.klmonline.com
san1.klmonline.com
services.ite2.klm.com
md11farewellflight.klm.com
upgradeyourself.klm.com
bb.klm.com
services.ave1.klm.com
ba.ee.klm.com
caretag.klm.com
developer-test.klm.com
www.se2.klm.com
partsofaperfectjourney.klm.com
www.iseatz.com
habile-challenges.klm.com
imperva.com
transactions.klm.com
destinationmatch.klm.com
services.ute2.klm.com
klm.com
evenweg.klm.com
connect.klm.com
cuba.klm.com
campaigndesigner2.klm.com
san1.klmonline.com
san1.klmonline.com
fes-acc.klm.com
werelddeal.klm.com
services.ae2.klm.com
federation.klm.com
escapades.klm.com
klpl03.klm.com
*.ams.cloud.klm.com
campagnes.klm.com
csr.klm.com
www3.ute1.klm.com
blog-origin.klm.com
flightbundle.klm.com
san1.klmonline.com
*.klm.com
daytripper.klm.com
mysteryticket.klm.com
flightbundle.klm.com
ers.klm.com
secure.klm.com
imperva.com
webmail.klm.com
flyforward.klm.com
payments.test.klm.com
digital.publications.klm.com
aend.klm.com
destinationmatch.klm.com
china.klm.com
evenweg.klm.com
mysteryticket.klm.com
gofuel-acc-ute.klm.com
origin.api.ee1.klm.com
nieuws.klm.com
imperva.com
airlines.api.amadeus.com
kiosk.ute2.klm.com
origin.api.klm.com
*.cf.devnet.klm.com
travel-with-kids.klm.com
campaigndesigner.klm.com
www.iseatz.com
campagnes.klm.com
werelddeal.klm.com
ba.ite2.klm.com
flightguide.klm.com
sustainability.klm.com
materials.klm.com
api.ee1.klm.com
origin.api.ae3.klm.com
flightoffers.klm.com
werelddeal.klm.com
china.klm.com
werelddeal.klm.com
flightoffers.klm.com
getaways.klm.com
flexfares.klm.com
evenweg.klm.com
san1.klmonline.com
flexfares.klm.com
payments.klm.com
flyforward.klm.com
www.klm.com
services2.klm.com
aefederation.klm.com
services.ae1.klm.com
fes-dev.klm.com
flightbundle.klm.com
fes.klm.com
houses.klm.com
evenweg.klm.com
china.klm.com
packyourdestination.klm.com
co2.ehn.klm.com
ehn.klm.com
kiosk.klm.com
san1.klmonline.com
san1.klmonline.com
services.ite2.klm.com
md11farewellflight.klm.com
upgradeyourself.klm.com
bb.klm.com
services.ave1.klm.com
ba.ee.klm.com
caretag.klm.com
developer-test.klm.com
www.se2.klm.com
partsofaperfectjourney.klm.com
www.iseatz.com
habile-challenges.klm.com
imperva.com
transactions.klm.com
destinationmatch.klm.com
services.ute2.klm.com
klm.com
evenweg.klm.com
connect.klm.com
cuba.klm.com
campaigndesigner2.klm.com
san1.klmonline.com
san1.klmonline.com
fes-acc.klm.com
werelddeal.klm.com
services.ae2.klm.com
federation.klm.com
escapades.klm.com
klpl03.klm.com
*.ams.cloud.klm.com
campagnes.klm.com
csr.klm.com
www3.ute1.klm.com
blog-origin.klm.com
flightbundle.klm.com
san1.klmonline.com
*.klm.com
daytripper.klm.com
mysteryticket.klm.com
flightbundle.klm.com
ers.klm.com
secure.klm.com
imperva.com
webmail.klm.com
flyforward.klm.com
payments.test.klm.com
digital.publications.klm.com
aend.klm.com
destinationmatch.klm.com
china.klm.com
evenweg.klm.com
mysteryticket.klm.com
Certificate
The complete raw certificate details for vanity-ae.klm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIISjCCBzKgAwIBAgIQDNZHrhVA0snKiRAE880DnzANBgkqhkiG9w0BAQsFADCB ljELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxPDA6BgNV BAMTM0NPTU9ETyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl cnZlciBDQTAeFw0xODEwMTkwMDAwMDBaFw0yMDEwMTgyMzU5NTlaMIHMMQswCQYD VQQGEwJOTDEQMA4GA1UEERMHMTE4MiBHUDEWMBQGA1UECBMNTm9vcmQtSG9sbGFu ZDETMBEGA1UEBxMKQW1zdGVsdmVlbjEaMBgGA1UECRMRQW1zdGVyZGFtc2V3ZWcg NTUxMTAvBgNVBAoTKEtvbmlua2xpamtlIEx1Y2h0dmFhcnQgTWFhdHNjaGFwcGlq IE4uVi4xEzARBgNVBAsTCldlYlN5c3RlbXMxGjAYBgNVBAMTEXZhbml0eS1hZS5r bG0uY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5uEyk8RXu8w IBKG/BEL/a5HKKdPMFUEMGTN9T2txN8OmtY6nQUhAztT7zus62rbwYaVckefxCsp 3U8xnU/7348+QsGLXIYZv7Pdok9QW6kwPRH3N8GbqxppjDJz2yN28iHdzeBbFIp/ oBtYg7etCYGyDykKgB4rJ0DTMaUvk94CnH4GkHo5AJp3jB95VWzBlJV10X80oySe lNwKof+unU7V/3wIo7MMPB+N7v/UUsYPd45jQm4WCQQqafxauDnNyuIz+7zYK+/A UMkYWgobeYVyM9EQMwmhW25cVOr1BYOWMIg/f/WKCH+Ux1MRPD6ksc7EHjbtFnjb EPA2vFa+uwIDAQABo4IEWjCCBFYwHwYDVR0jBBgwFoAUmvMr2s+tT7YvuypISCoS txtCwSQwHQYDVR0OBBYEFKEGK+XG4q5NhYZkYW2XokprtDWQMA4GA1UdDwEB/wQE AwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD AjBQBgNVHSAESTBHMDsGDCsGAQQBsjEBAgEDBDArMCkGCCsGAQUFBwIBFh1odHRw czovL3NlY3VyZS5jb21vZG8uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0fBFMwUTBP oE2gS4ZJaHR0cDovL2NybC5jb21vZG9jYS5jb20vQ09NT0RPUlNBT3JnYW5pemF0 aW9uVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBLmNybDCBiwYIKwYBBQUHAQEEfzB9 MFUGCCsGAQUFBzAChklodHRwOi8vY3J0LmNvbW9kb2NhLmNvbS9DT01PRE9SU0FP cmdhbml6YXRpb25WYWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCQGCCsGAQUF BzABhhhodHRwOi8vb2NzcC5jb21vZG9jYS5jb20wggEXBgNVHREEggEOMIIBCoIR dmFuaXR5LWFlLmtsbS5jb22CE2FlLmtsbXRha2VzY2FyZS5jb22CE2VlLmtsbXRh a2VzY2FyZS5jb22CFGl0ZS5rbG10YWtlc2NhcmUuY29tghR1dGUua2xtdGFrZXNj YXJlLmNvbYIRdmFuaXR5LWVlLmtsbS5jb22CEnZhbml0eS1pdGUua2xtLmNvbYIS dmFuaXR5LXV0ZS5rbG0uY29tghd3d3ctYWUua2xtdGFrZXNjYXJlLmNvbYIXd3d3 LWVlLmtsbXRha2VzY2FyZS5jb22CGHd3dy1pdGUua2xtdGFrZXNjYXJlLmNvbYIY d3d3LXV0ZS5rbG10YWtlc2NhcmUuY29tMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq AWgAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWaL4mMtAAAE AwBHMEUCICCznlJe1fUIi57UnTbZX6zpZQXm/nsQ7K7j6r8Z0NQOAiEAut4bKwCj 3f/VyvwFsXtUdGxq+6mCfQ13JbBYdNxLdTcAdgBep3P531bA57U2SH3QSeAyepGa DIShEhKEGHWWgXFFWAAAAWaL4mMWAAAEAwBHMEUCIExKNATJBtohR9w+D8bpAPIV 5EZZnbuE3Fqn2/HghebjAiEA3WvYG42+/H2WZL+KZstX/k8vsOOOlfODgeUrc+OM JGQAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWaL4mLpAAAE AwBHMEUCIFJchYgYHaurdrI3DSa2Yl3MM5yb3Fm/aJQ2AN4/jGW3AiEAlo75Rv6e 7+JzVRfLSlcJcks92q2bxdcZuTT0mjV+230wDQYJKoZIhvcNAQELBQADggEBAD5J NKUVLEQKXbJl4JV4hpKDISsdkW3CVMVDvToF88QewusUe9GjQymIWXIwNyfV8Bgn flZFybfYh4win4VmmObvIXFtWquSkkoBomL1cPcHdN4xtyEH246SJRgiRhk/b/bp Ma2YMER15dxmjcEzh7uTWv0xa4Uc8h2Fv8t56mXHPIlFf11IWambHkWk6u8C+1oN pgm6RDZKO5YkSvdad/m0JzVueo8J2a/Kl/nSxqFHRgqYpH6zMbgC+fkGVHy67iZV G25UVVM4/4OSuTHC6B2gUBJRIQAtKuRy/WKwP7Y4fmNWmwGWP6fgVroCLagkVUk8 YXwQdulAkVpBibIhtmY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5uEyk8RXu8wIBKG/BEL /a5HKKdPMFUEMGTN9T2txN8OmtY6nQUhAztT7zus62rbwYaVckefxCsp3U8xnU/7 348+QsGLXIYZv7Pdok9QW6kwPRH3N8GbqxppjDJz2yN28iHdzeBbFIp/oBtYg7et CYGyDykKgB4rJ0DTMaUvk94CnH4GkHo5AJp3jB95VWzBlJV10X80oySelNwKof+u nU7V/3wIo7MMPB+N7v/UUsYPd45jQm4WCQQqafxauDnNyuIz+7zYK+/AUMkYWgob eYVyM9EQMwmhW25cVOr1BYOWMIg/f/WKCH+Ux1MRPD6ksc7EHjbtFnjbEPA2vFa+ uwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17063341320505132216000810301749265311 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-18 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1182 GP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdamseweg 55' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Koninklijke Luchtvaart Maatschappij N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WebSystems' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vanity-ae.klm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24693158603506022296812200344925687215203556205133844264998832946314970118871235814700141008759487611435549137092320303093765986171905842497046859024751055925721149817892014466225224561189033648414462839371975777076230741997062818666257786806240171295014896904846062626385501467807733228332646616077987976776992876723016098181033391380825194393982183705918942293221843414097948791979859882982378456188273235969361151024682090928883039382287818571200825106699475146832828238206760863453292386137790111968288023681330305937653904635674506846234957809074574683133827747396543839994997572168461057687550287393940047314619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a1062be5c6e2ae4d858664616d97a24a6bb43590 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (270 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity-ae.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ae.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ee.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ite.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ute.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity-ee.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity-ite.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanity-ute.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ae.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ee.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ite.klmtakescare.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-ute.klmtakescare.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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