pilots.aa.com

- American Airlines Inc -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 18:4e:aa:8a:e7:55:3c:8a:a5:d4:b1:94:a4:6a:94:12 was issued on by Entrust, Inc..

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

American Airlines Inc

Company registration number: 332421
Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 18:4e:aa:8a:e7:55:3c:8a:a5:d4:b1:94:a4:6a:94:12
Serial Number (int): 32309930068516827120154386771389092882
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 82:11:81:72:ca:1b:74:a1:4d:09:c1:eb:7c:f0:d2:55:50:61:b4:56
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): b3:2d:51:79:04:c5:82:54:51:ee:d2:63:3b:9a:aa:c9:c9:7c:44:18
Fingerprint (sha256): 00:f4:77:0a:54:49:a8:63:c0:da:5d:a6:55:2c:e4:eb:47:54:18:4e:41:be:47:e1:95:9b:2e:53:d0:8d:80:5f

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate pilots.aa.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pilots.aa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pilots.aa.com
aadvantagebusiness-api.aa.com
aadvantagebusiness.aa.com
aavpn.aa.com
ace.aa.com
admintool.aps.aa.com
api.pay.aa.com
cadets.aa.com
cjsa.aa.com
cn.cninternal.aa.com
cn.liveactivity.aa.com
cpop-api.aa.com
cpop.aa.com
ctsgs-api.aa.com
ctsgs.aa.com
custprofile.fop.aa.com
cxp-replica.aa.com
cxp.aa.com
dash.aa.com
dba-auction.aa.com
dfwd-hmi01.bhs.aa.com
dfwd-hmi02.bhs.aa.com
dr.citrix.aa.com
eap.aa.com
ecs.aa.com
emanualsredirect.me.aa.com
emftss.aa.com
envoyseniority.eaglehris.aa.com
faroms-prod.aa.com
fbr.aa.com
fos.aa.com
gendecs.aa.com
gendecs.dr.aa.com
globalsupport.aa.com
gql.aa.com
hrapi.eaglehub.aa.com
hraux-api.aa.com
ipas-admin.aa.com
ipas.aa.com
itas.aa.com
jetnet.aa.com
kcm.aa.com
laxt4-hmi01.bhs.aa.com
laxt4-hmi02.bhs.aa.com
loa.aps.aa.com
loyalty-benefit.aa.com
miant-hmi01.bhs.aa.com
miant-hmi02.bhs.aa.com
mytime-east-beta.aa.com
mytime-east.aa.com
mytime-west-beta.aa.com
mytime-west.aa.com
mytime.aa.com
myview.aps.aa.com
paxhub.services.aa.com
pay.aa.com
pilotrecruiter.aa.com
pilots.aps.aa.com
pma.aa.com
poc.dfw1.aavpn.aa.com
prefunds.aa.com
refunds.aa.com
rovrplus-east-beta.aa.com
rovrplus-east.aa.com
rovrplus-west-beta.aa.com
rovrplus-west.aa.com
saleshub.serverless.aa.com
saleslifecyclemanagement-api.aa.com
saleslifecyclemanagement-dr-api.aa.com
saleslinkservices.aa.com
salt.aa.com
sarsys.aa.com
ssc.reg.aa.com
sscm.aa.com
tacreports.aa.com
tmscsurvey.aa.com
tntaaap39160.corpaa.aa.com
ventana-api.aa.com
wb.etm.aa.com
webfos.aa.com
webfosapp.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com
hub.aa.com

Certificate

The complete raw certificate details for pilots.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUEhmxiYEcTdB1GTXDz5
85atfNf6a/Gp1Nt25Lh+UoTcTLZxKjMSw8O/oQ0M34/id+dlB3PqNfiofQMKUwqg
fAYwUTm49/oFi1OFjrZsxXKBD3FTB5vNBVcU5j39NLpRwG953RPRZhiiIElrn34w
jk7ROiXvcRn29Ncsbk4hIOTQsc78VQHpOlg71wlGkm7PjeXsJqNp2zAuPgmYLsQl
UPX2zIShC1a3+XRndAkFvKnBjuPcs9eFcrGZu1WsWlJ6C/ZNtAsJgrutIwdbFmL7
WwOUJGQmfE/lNWZQ1IvuBiJJ5L7bcKM8Ewl1GNYVi+T8sBCgfLC+adsMWiAiqsI5
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32309930068516827120154386771389092882
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 20:29:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-23 20:29:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '332421'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pilots.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24901063505978067061971621332471018249042050961140687740538622289063595154445854060536577626570569246673856852816281205545922878107319297313366365160543680921952131512847395446422651532488870763456238938902157972242517640671442419394560580116641871611180835841053023340385745845209935749055619152121054456052553902714487688238158977020492157850333924259888417283378827188446717655893566853811084167641003567673903835378582255617597167264278554039307294369664114221839728994708573269158680777510864019773256804295812274999468213286243898921345328222385844200996595978638360290980666932422211032961075778590172774545787
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82118172ca1b74a14d09c1eb7cf0d2555061b456
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1582 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilots.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadvantagebusiness-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aadvantagebusiness.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aavpn.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ace.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admintool.aps.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.pay.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cadets.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjsa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.cninternal.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.liveactivity.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpop-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpop.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctsgs-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctsgs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custprofile.fop.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxp-replica.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxp.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dash.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dba-auction.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwd-hmi01.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dfwd-hmi02.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dr.citrix.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emanualsredirect.me.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emftss.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoyseniority.eaglehris.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faroms-prod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbr.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fos.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gendecs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gendecs.dr.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsupport.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gql.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hrapi.eaglehub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hraux-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipas-admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ipas.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itas.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jetnet.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kcm.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laxt4-hmi01.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laxt4-hmi02.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loa.aps.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-benefit.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miant-hmi01.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miant-hmi02.bhs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytime-east-beta.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytime-east.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytime-west-beta.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytime-west.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytime.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myview.aps.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paxhub.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotrecruiter.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilots.aps.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pma.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'poc.dfw1.aavpn.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefunds.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refunds.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovrplus-east-beta.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovrplus-east.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovrplus-west-beta.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rovrplus-west.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleshub.serverless.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleslifecyclemanagement-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleslifecyclemanagement-dr-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saleslinkservices.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salt.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sarsys.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssc.reg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscm.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tacreports.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tmscsurvey.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tntaaap39160.corpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ventana-api.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wb.etm.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfos.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webfosapp.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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