premium-mobile.stage.aa.com

- American Airlines Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:27:20:53:ac:5c:45:60:29:d2:8b:ee:f6:9f:0e:60 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:27:20:53:ac:5c:45:60:29:d2:8b:ee:f6:9f:0e:60
Serial Number (int): 16153891193289624771616232401885138528
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7e:b1:a5:d3:85:1f:4e:71:4a:38:c1:40:9e:9e:da:29:8c:f2:26:ae
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ea:99:20:aa:93:85:5a:52:c4:a5:53:3e:95:32:58:4b:df:99:06:bb
Fingerprint (sha256): 03:1f:bd:0a:48:65:bf:63:06:0d:ee:8f:8b:42:1e:f1:32:dd:1c:a6:93:97:75:e9:a8:4a:14:75:cd:9b:ed:4c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate premium-mobile.stage.aa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premium-mobile.stage.aa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premium-mobile.stage.aa.com
www.nppgadmin.stage.aa.com
www.newmelab.qcorpaa.aa.com
www.newme-stage.aa.com
www.airpass.test.aa.com
www.airpass.stage.aa.com
www.aairpass.test.aa.com
www.aairpass.stage.aa.com
wiki-nonprod.aa.com
viper-test.aa.com
viper-stage.aa.com
viper-dev.aa.com
travelplanner.test.aa.com
testcrewmobile.psaairlines.com
testapi.psaairlines.com
test.marketdata.aa.com
techopshub.me.stage.aa.com
tac.stage.aa.com
svcardissue.stage.aa.com
svcarddetails.stage.aa.com
stage.srflightoptions.aa.com
stage.marketdata.aa.com
stage.base.aa.com
stage.admin.aa.com
sg.np.bags.aa.com
safeline.mx.stage.aa.com
resagent.nonprod.aa.com
raven-dev.aa.com
qa.srflightoptions.aa.com
qa.admin.aa.com
ptts-admin-uat.aa.com
ptts-admin-stage-smoke.aa.com
ptts-admin-dev.aa.com
prime.app.np.bags.aa.com
pilot-tts-uat.aa.com
pilot-tts-stage-smoke.aa.com
pilot-tts-dev.aa.com
owrcm-stg.aa.com
nrta.test.aa.com
nppgadmin.stage.aa.com
nonprod-login.aa.com
newmelab.qcorpaa.aa.com
newme-stage.aa.com
merch-stg.aa.com
merch-dev.aa.com
mctapp-stage.aa.com
loyalty-upgrades.stage.aa.com
kronosadmin-stage.aa.com
kiko.app.np.bags.aa.com
health.app.np.bags.aa.com
hazraps-stage.aa.com
hazraps-dev.aa.com
globalsales-stg.aa.com
frd.stg.aa.com
frd.stage.aa.com
flightweb-stage.aa.com
flightweb-dev.aa.com
featureflags-np.aa.com
featureflags-api-np.aa.com
fdgd-test-apigateway.aa.com
fdgd-stage-apigateway.aa.com
fdgd-dev-apigateway.aa.com
faportal-stage.aa.com
falcon.app.np.bags.aa.com
envoycrewstage.aa.com
envoycrew.qcorpaa.aa.com
deviate.app.np.bags.aa.com
developer-nonprod.aa.com
dev.marketdata.aa.com
dev.base.aa.com
customermdm.nonprod.services.aa.com
ctapmphx.aa.com
crewcompensation.test.aa.com
crewcompensation.stage.aa.com
corporateexperienceframework-uat.aa.com
config.app.np.bags.aa.com
compensation.test.aa.com
compensation.stage.aa.com
cn.nonprod.services.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.feature.aa.com
cabin.nonprod.aa.com
bagsecurity.app.np.bags.aa.com
asmdev2.aa.com
asmdev1.aa.com
api.np.bags.aa.com
apc-stage.aa.com
apc-dev.aa.com
akamaitest4.aa.com
airportagent.test.aa.com
airpass.test.aa.com
airpass.stage.aa.com
airpass.api.stage.aa.com
airpass.api.qa.aa.com
airpass.api.dev.aa.com
agentassist.test.aa.com
agentassist.nonprod.aa.com
achievements-dev.aa.com
aairpass.test.aa.com
aairpass.stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
stage.aa.com
cass.qcorpaa.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
fb-pdc.aa.com
mclastage.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
aacloud.qa.esoa.qcorpaa.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
aasales.dev.esoa.qcorpaa.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
webref.stage.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
yada.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
concourse.ci.qcorpaa.aa.com
hub.aa.com
psa.qcorpaa.aa.com
sharedcontent1-stg.aa.com
rovrplus-gateway-east.aa.com
bc.aa.com
faroms-trng.aa.com
soa.apim.dev.sales.aa.com
sharedcontent1-stg-mg-cdc.aa.com
yada-beta.stage.aa.com
handpunch.aa.com
manuals-stage.aa.com
portal45.stage.jetnet.aa.com
*.apps.cpepaas.aa.com
ssc.stagereg.aa.com
fsa.aa.com
npportal-tmp.aa.com
americanwaymagazine.com
security.aa.com
atd.jetnet.aa.com
*.sr.prd.pdc.aa.com

Certificate

The complete raw certificate details for premium-mobile.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgpJNdb65CUS8RbCBbp9
emKNxNGJSkcoyxSkE3voQCEC9vVTre2L8dEEZhYdpVhVTeqoEEptbQNaDosX7H5b
Z529jUNI2xaSvqGIvdlmmtr9BCWnBeZJRxIE89fgrXlixUKjCqXklBlECHtNVWR7
HK456Nb6g2L7hZs0IiUX1MfaVF/xrLA1eM/pKkjv0gMth3F596hFKqWe6DFWgU3j
zc90wUXmbAG/gcf+vE9+qmBFrLNnh4FYdA1rUSM4Nhe6A3M/a1CqkJI69FqjGMGD
l7Knvji+eegNEg9xc2p5PduvRanJAmwwjW/AX0xk4t/HPaD4OuWaQvmZ7Hg9+hO8
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16153891193289624771616232401885138528
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premium-mobile.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22980443708509462085948707597883102866386116896597868486374813489565644916534758759702266884529002821096048790373696360038944766949808034511712727665286100147664674396084456109433625050265768334072487805323348881898756650962390228661085195006271768539207092614648374337686555229404503523995515149258218490812943367633322847116177534177218796033264022487273463525455000216246040592622270016199728546040981032926713999031479496357987628319533088183649662962797936981716335649135732890207997957931682536704780576237292129790831558333595023242689726010791491677008977842306890997355123308601662534299315602064795963210879
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eb1a5d3851f4e714a38c1409e9eda298cf226ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-mobile.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcrewmobile.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techopshub.me.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tac.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcardissue.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcarddetails.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeline.mx.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raven-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owrcm-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrta.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-login.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctapp-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-upgrades.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronosadmin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiko.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsales-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-api-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-test-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-stage-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-dev-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcon.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrewstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviate.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermdm.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctapmphx.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateexperienceframework-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.platform.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.feature.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabin.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsecurity.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev2.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest4.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievements-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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