www.faa.gov

- Federal Aviation Administration -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 65:6e:c9:d3:6f:51:6c:33:12:ab:98:b7:9f:d4:5c:15 was issued on by GeoTrust Inc..

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Federal Aviation Administration

Organization: Federal Aviation Administration
Organization unit: Federal Aviation Administration
State / Province: District Of Columbia
Locality: Washington
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:6e:c9:d3:6f:51:6c:33:12:ab:98:b7:9f:d4:5c:15
Serial Number (int): 134827273744639228737220835420411288597
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 48:3d:52:36:c0:7d:37:83:13:0c:b5:2a:18:ee:6f:2b:f5:1d:9c:22
Fingerprint (sha256): 04:36:73:8a:b9:92:94:4e:33:b1:d4:c3:dd:d9:e8:28:bb:52:d9:c0:10:d8:c6:a2:c1:66:54:f9:b7:b6:a8:15

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate www.faa.gov

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.faa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dotideahub.gov
www.plainlanguage.gov
skywatch.faa.gov
beta.faasafety.gov
www.ash.faa.gov
rvsm.tc.faa.gov
www.intl.faa.gov
www.ast.faa.gov
www.fly.faa.gov
acims.faa.gov
www.airporttech.tc.faa.gov
lasers.faa.gov
www.ato.faa.gov
adsbperformance.faa.gov
www.sbo.faa.gov
laas.tc.faa.gov
da2.faa.gov
waivers.faa.gov
www.ipa.faa.gov
www.adsbrebate.faa.gov
www.aosc.faa.gov
ndpuat.faa.gov
www.faasafety.gov
www.logistics.faa.gov
laser.faa.gov
aads.faa.gov
www.academy.faa.gov
dotmap.dot.gov
faa.gov
webadapt.faa.gov
adsbrebate.faa.gov
ndpjira.faa.gov
www.atoe.tc.faa.gov
www.faa.gov

Other certificates including the domain name faa.gov

(limited to 100 certificates)
efsas.avs.faa.gov
asi.1.faa.gov
dmt.faa.gov
*.cf-lab.faa.gov
bpmsoa-test.faa.gov
www.faa.gov
authtest.sm.faa.gov
serviceareaapps.faa.gov
fdc3dcpap854.fcs.faa.gov
ftb-test-fims-server.faa.gov
www.faa.gov
agcinsitetest.sm.faa.gov
ama400-pvs2.amc.faa.gov
medxpress.faa.gov
caeg.faa.gov
adsftp.faa.gov
www.faa.gov
arcsight.fcs.faa.gov
csimsuat2.csnet.faa.gov
e2-satotravel-signing.sm.faa.gov
serenacmtest.amc.faa.gov
csims2.csnet.faa.gov
mail.ems365.faa.gov
fist.faa.gov
falcon.faa.gov
asmfvasp02.amc.faa.gov
help.spas-uat.faa.gov
rbrt.avs.faa.gov
iactdcpvap148.ad.faa.gov
rbrt.avs.faa.gov
enroutesupport.faa.gov
fhissso.faa.gov
sdrs.faa.gov
isbp.faa.gov
ilmits.amc.faa.gov
cdmsuat1.sm.faa.gov
asapowa.ash.faa.gov
registry.faa.gov
dev-hotline.faa.gov
part16.airports.faa.gov
home.spasdev.faa.gov
nasea.faa.gov
viewer.tc.secure-ose.faa.gov
sua.faa.gov
registermyuas.faa.gov
vpntest.faa.gov
faa-exm-00.ad.faa.gov
FAA-BelarcDA.faa.gov
extranet.asias.faa.gov
soatest.smext.faa.gov
oaps.faa.gov
dev-www.faa.gov
askmeservices.avs.faa.gov
opt.faa.gov
blackboardtest.sm.faa.gov
wwwtest.faa.gov
wifi.amc.faa.gov
avssharepoint.faa.gov
wifi.amc.faa.gov
aidaptest.naimes.faa.gov
esc-dbprotect.amc.faa.gov
magr-tst.faa.gov
*.faa.gov
amcs-preprod.faa.gov
tfmlearning.faa.gov
av-info.faa.gov
ssm-dev.amc.faa.gov
tifpa-ws.faa.gov
notamsstage.aim.faa.gov
attivio.faa.gov
iasdex.faa.gov
tsd.fly.faa.gov
oaps.faa.gov
denodo-prod3.faa.gov
tmaster.falcon.faa.gov
uis.faa.gov
dgc.eim.faa.gov
blackboard.sm.faa.gov
tsscweb01-dr.tssc.faa.gov
webservices2012-test.avs.faa.gov
aps2.faa.gov
prd.faa.gov
ncr.voicemail.faa.gov
opt.faa.gov
itams.faa.gov
act2.faa.gov
jiratest.sm.faa.gov
avsmtdashboard.avs.faa.gov
www.faa.gov
enroutesupporttest.faa.gov
aviator.faa.gov
uas.npn.faa.gov
www.faa.gov
serenasmbtest.amc.faa.gov
cims.faa.gov
ioeaaa.faa.gov
fhisdevsso.faa.gov
eda.faa.gov
icamms.faa.gov
amcrelay2.faa.gov

Certificate

The complete raw certificate details for www.faa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIgDCCB2igAwIBAgIQZW7J029RbDMSq5i3n9RcFTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcwNjA4MDAwMDAwWhcNMTcxMDI2MjM1
OTU5WjCBqzELMAkGA1UEBhMCVVMxHTAbBgNVBAgMFERpc3RyaWN0IE9mIENvbHVt
YmlhMRMwEQYDVQQHDApXYXNoaW5ndG9uMSgwJgYDVQQKDB9GZWRlcmFsIEF2aWF0
aW9uIEFkbWluaXN0cmF0aW9uMSgwJgYDVQQLDB9GZWRlcmFsIEF2aWF0aW9uIEFk
bWluaXN0cmF0aW9uMRQwEgYDVQQDDAt3d3cuZmFhLmdvdjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAOay4JK/HXrcORoRsIPmsLY5tSCObJyGDF7+KyUa
sEWpiEH8cQmgyV9SGYZ23ROg6CtseJl54gXQimUVrm0PJeaw947/rkS8FBKgWugS
F7xRLDpQ/ialheZQLWgJSATH1DkCntrgC5HYWgLbDbrNBQbjq6Xpsw4XFL9WoeS+
iPj68YxzwxSuxYYchUtfTzKoDM38O1NSPn4gis3bCt1PMPGX2C0hNZJRquqax1kU
3f/RRFrZ2DwLnEvGEvbWZ3W3x3W8OLjurCM8+16LTz29/0gUqqEpoXh9slAAmeBq
EJHuuwtjOcym+ebLNe6hPsuwcCU1qyTS9kmXSnXyzkS79h0CAwEAAaOCBQQwggUA
MIICcgYDVR0RBIICaTCCAmWCEnd3dy5kb3RpZGVhaHViLmdvdoIVd3d3LnBsYWlu
bGFuZ3VhZ2UuZ292ghBza3l3YXRjaC5mYWEuZ292ghJiZXRhLmZhYXNhZmV0eS5n
b3aCD3d3dy5hc2guZmFhLmdvdoIPcnZzbS50Yy5mYWEuZ292ghB3d3cuaW50bC5m
YWEuZ292gg93d3cuYXN0LmZhYS5nb3aCD3d3dy5mbHkuZmFhLmdvdoINYWNpbXMu
ZmFhLmdvdoIad3d3LmFpcnBvcnR0ZWNoLnRjLmZhYS5nb3aCDmxhc2Vycy5mYWEu
Z292gg93d3cuYXRvLmZhYS5nb3aCF2Fkc2JwZXJmb3JtYW5jZS5mYWEuZ292gg93
d3cuc2JvLmZhYS5nb3aCD2xhYXMudGMuZmFhLmdvdoILZGEyLmZhYS5nb3aCD3dh
aXZlcnMuZmFhLmdvdoIPd3d3LmlwYS5mYWEuZ292ghZ3d3cuYWRzYnJlYmF0ZS5m
YWEuZ292ghB3d3cuYW9zYy5mYWEuZ292gg5uZHB1YXQuZmFhLmdvdoIRd3d3LmZh
YXNhZmV0eS5nb3aCFXd3dy5sb2dpc3RpY3MuZmFhLmdvdoINbGFzZXIuZmFhLmdv
doIMYWFkcy5mYWEuZ292ghN3d3cuYWNhZGVteS5mYWEuZ292gg5kb3RtYXAuZG90
LmdvdoIHZmFhLmdvdoIQd2ViYWRhcHQuZmFhLmdvdoISYWRzYnJlYmF0ZS5mYWEu
Z292gg9uZHBqaXJhLmZhYS5nb3aCE3d3dy5hdG9lLnRjLmZhYS5nb3aCC3d3dy5m
YWEuZ292MAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMCsGA1UdHwQkMCIwIKAe
oByGGmh0dHA6Ly9nbi5zeW1jYi5jb20vZ24uY3JsMIGdBgNVHSAEgZUwgZIwgY8G
BmeBDAECAjCBhDA/BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29t
L3Jlc291cmNlcy9yZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBz
Oi8vd3d3Lmdlb3RydXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU0m/3lvSF
P3I8MH0j2oV4m6N8WnwwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNodHRw
Oi8vZ24uc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ24uc3ltY2IuY29t
L2duLmNydDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB2AN3rHSt6DU+mIIuBrYFo
cH4ujp0B1VyIjT0RxM227L7MAAABXIj4gjAAAAQDAEcwRQIgHi5Lj51IWNZctXMq
JU6vrRGWDpurf76yD04kek4eUhECIQCnY1yeWhx6675tVAAwNFUhdF0UBbP4yjJg
NlrwS4rgKQB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABXIj4
gmkAAAQDAEgwRgIhANg2KjPFyB/Nn38T3aB73Xvqn9wpOuUGkwRqux1oCj3cAiEA
zLpot0Gxh6QndjKFGPsrhzFSHh1pQX4O+Iv5THNLDJMwDQYJKoZIhvcNAQELBQAD
ggEBADPsEVJImhLuzk6QFJmCChgDdRAeimHS1BAlbGMtYpvQ09PKWvh/T/D0RjTE
1aQDsmEQ4EnVXSP7UbxMfimztzCIAV3fPXz2kzsvKYo4Fh+hC9ac8uPx+QUw34ez
hM3omosrjrI0cSJGxPRVPqVB6azuw1vm4R/t74fL7qRcFgKp6ZR6CvcKyXaz+OLY
vAfz6lLkMccDzAXU5l1bgdVYneVqY/Q71afFwDKgI5mwMihCVrxfhViFB2mWIMbj
mMV3SX/K/3L1CloQSr/wG+Y56MpFf7+Waje9JFv8jO6Iz+ezfYGcu8KVhNjLnp3E
CZQctIyXnlwGOzgPMytwX35ZK4o=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5rLgkr8detw5GhGwg+aw
tjm1II5snIYMXv4rJRqwRamIQfxxCaDJX1IZhnbdE6DoK2x4mXniBdCKZRWubQ8l
5rD3jv+uRLwUEqBa6BIXvFEsOlD+JqWF5lAtaAlIBMfUOQKe2uALkdhaAtsNus0F
BuOrpemzDhcUv1ah5L6I+PrxjHPDFK7FhhyFS19PMqgMzfw7U1I+fiCKzdsK3U8w
8ZfYLSE1klGq6prHWRTd/9FEWtnYPAucS8YS9tZndbfHdbw4uO6sIzz7XotPPb3/
SBSqoSmheH2yUACZ4GoQke67C2M5zKb55ss17qE+y7BwJTWrJNL2SZdKdfLORLv2
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134827273744639228737220835420411288597
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'District Of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Federal Aviation Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.faa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29123017796374748627962719523505996885125759720104455030559913178689586791710082656076873140983819808387192199422819989395700422152974038805851101400331740440568506277498151651469512921739944284411013655443033542084073455647985296420524554505488793331063111117350688775557443082144660227707117940344205964848191479206604805493914948585607971875766375794840981750684093521185386918532512404186601341307592914796795772819560926284269886407284695586638671271269170561612947903914711195390635974069259219478138369644383302548937726196794291742816991479715296860978221586238201222132114844238327489328488458711017960764957
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (617 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dotideahub.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plainlanguage.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skywatch.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.faasafety.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ash.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rvsm.tc.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intl.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ast.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fly.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acims.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airporttech.tc.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lasers.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ato.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsbperformance.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbo.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laas.tc.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da2.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waivers.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ipa.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adsbrebate.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aosc.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndpuat.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faasafety.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.logistics.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laser.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aads.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.academy.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dotmap.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webadapt.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adsbrebate.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndpjira.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atoe.tc.faa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.faa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c88f88230000004030047304502201e2e4b8f9d4858d65cb5732a254eafad11960e9bab7fbeb20f4e247a4e1e5211022100a7635c9e5a1c7aebbe6d540030345521745d1405b3f8ca3260365af04b8ae029007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c88f882690000040300483046022100d8362a33c5c81fcd9f7f13dda07bdd7bea9fdc293ae50693046abb1d680a3ddc022100ccba68b741b187a42776328518fb2b8731521e1d69417e0ef88bf94c734b0c93
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0033ec1152489a12eece4e901499820a180375101e8a61d2d410256c632d629bd0d3d3ca5af87f4ff0f44634c4d5a403b26110e049d55d23fb51bc4c7e29b3b73088015ddf3d7cf6933b2f298a38161fa10bd69cf2e3f1f90530df87b384cde89a8b2b8eb234712246c4f4553ea541e9aceec35be6e11fedef87cbeea45c1602a9e9947a0af70ac976b3f8e2d8bc07f3ea52e431c703cc05d4e65d5b81d5589de56a63f43bd5a7c5c032a02399b032284256bc5f85588507699620c6e398c577497fcaff72f50a5a104abff01be639e8ca457fbf966a37bd245bfc8cee88cfe7b37d819cbbc29584d8cb9e9dc409941cb48c979e5c063b380f332b705f7e592b8a