earnonline.flyingblue.com

- Koninklijke Luchtvaart Maatschappij N.V. -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 5c:6c:0f:0b:c0:c0:0f:0b:cb:c4:f1:5e:68:7f:33:0d was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Koninklijke Luchtvaart Maatschappij N.V.

Organization: Koninklijke Luchtvaart Maatschappij N.V.
Organization unit: Koninklijke Luchtvaart Maatschappij N.V.
Address: AMSTERDAMSEWEG 55
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: Amstelveen
Country: NL

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 5c:6c:0f:0b:c0:c0:0f:0b:cb:c4:f1:5e:68:7f:33:0d
Serial Number (int): 122850048840241170819154431812202083085
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fd:20:d3:83:54:a6:df:e1:6e:fc:df:ec:25:9a:b7:71:42:e4:87:d3
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): be:51:1e:9f:d5:6a:30:4a:db:d6:f4:cc:1e:ed:44:96:8c:e1:b4:e6
Fingerprint (sha256): 04:b0:7c:0a:0b:ae:a3:21:71:04:de:11:48:7d:be:d9:76:fa:1c:08:dc:9a:aa:25:42:55:1f:8e:81:a1:69:ce

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate earnonline.flyingblue.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for earnonline.flyingblue.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

earnonline.flyingblue.com
www.earnonline.flyingblue.com

Other certificates including the domain name flyingblue.com

(limited to 100 certificates)
events-uat.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
explorefurther.flyingblue.com
link-shopformiles.flyingblue.com
san1.klmonline.com
www.klm.com
earnonline.flyingblue.com
www.flyingblue.com
shopformiles.flyingblue.com
events-uat.flyingblue.com
static-shopandmiles.flyingblue.com
san-17-s51.tlsprovisioning.exacttarget.com
san-8-s10.tlsprovisioning.exacttarget.com
guide.flyingblue.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
klm.com
guide.flyingblue.com
san1.klmonline.com
shopformiles.flyingblue.com
san1.klmonline.com
guide.flyingblue.com
san1.klmonline.com
events.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
flyingblue.com
ui.uat.lifestylesolutionsteam.com
shopformiles.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
san1.klmonline.com
*.rewardsmap.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
events-uat.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
shapedbytravel.flyingblue.com
www.klm.com
shopandmiles.flyingblue.com
brix.flyingblue.com
*.rewardsmap.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
mcprod.reward4d.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
static-shopandmiles.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
mcprod.reward4d.com
brix.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
points-storefront.flyingblue.com
static-shopandmiles.flyingblue.com
points-storefront.flyingblue.com
levelcheck.flyingblue.com
www.flyingblue.us
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
cloud.shoponline.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
earnonline.flyingblue.com
ui.uat.lifestylesolutionsteam.com
san-8-s10.tlsprovisioning.exacttarget.com
shopformiles.flyingblue.com
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
mcprod.reward4d.com
airfrance.com
www.flyingblue.com
shopformiles.flyingblue.com
san1.klmonline.com
mcprod.reward4d.com
shopformiles.flyingblue.com
www.klm.com
cdn-test.klm.com
www.flyingblue.com
static-shopandmiles.flyingblue.com
*.rewardsmap.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
click.shoponline.flyingblue.com
link-shopformiles.flyingblue.com
hotelsformiles.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
klm.com
events.flyingblue.com
events.flyingblue.com
www.flyingblue.us

Certificate

The complete raw certificate details for earnonline.flyingblue.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 122850048840241170819154431812202083085
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1182 GP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amstelveen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMSTERDAMSEWEG 55'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Koninklijke Luchtvaart Maatschappij N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Koninklijke Luchtvaart Maatschappij N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'earnonline.flyingblue.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 952158190889710833744395789311183870625711995849862211877445962269970628049729995409690262711630827232738135876138528756333917526332063398515236693260662092742443835173685263255969486875121653253894265487663230500964500498943193249402424013404007203403163496872142244967243036246333462728315947935693730900564264421650108516447568837764960800672559646222373578805188262310551580602677471952862649076617954407890212657298490713953363843892012951038441068801752800196185889971891090440961169674535284300984255685299084368627688165132772017090498218302397065271954997062148903537302665045588316495401511919244946391567629110727904622689025028206240745601697552546699167213010740987013013391702001821544695294030084363440615908475776060264955666712390572643765728264337469158085237080256832979820921175692508415857452471374671832160631941343017419981412564399247854357647659153670828585759811368925390191460717877339486474863045565527184647346461117063240593988464083128371011592848326806309778685281546283538867202293615330895479606048829835835954565386922982044320511707651134457494646787550083402166126734808470693075140654941873557589799547798107648108778169448349153993049802976172411686571257471206334624171065531874186414050298569
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd20d38354a6dfe16efcdfec259ab77142e487d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earnonline.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.earnonline.flyingblue.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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