yada-beta.stage.aa.com

- American Airlines Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:6b:00:80:b6:a0:e7:97:ef:e9:fa:2b:ba:30:d5:42 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:6b:00:80:b6:a0:e7:97:ef:e9:fa:2b:ba:30:d5:42
Serial Number (int): 3214041953158653715922254105815340354
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: bd:d2:d3:d5:40:92:fa:06:32:b5:f0:eb:be:2a:4f:22:ec:06:06:63
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): ec:95:93:08:30:ed:b8:f1:fd:59:ff:a5:44:3f:72:e0:9d:e0:96:8a
Fingerprint (sha256): 06:89:ab:cb:8f:00:cd:cf:87:59:50:c4:d6:47:c1:16:42:7e:58:ff:cc:65:99:cd:16:c4:cd:59:45:d3:bd:a1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate yada-beta.stage.aa.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yada-beta.stage.aa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yada-beta.stage.aa.com
setool-test.aa.com
facebook-test.snap.aa.com
dss-gids-api-uat.aa.com
setoolapi-test.aa.com
dev.squad360.aa.com
get.azd.aa.com
pilot-tts-stage.aa.com
akamaitest30.aa.com
ublcrewscheduling-test.aa.com
www.elite-stage.aa.com
test.raptor.aa.com
businessextra.stage.aa.com
fapbs-stg.aa.com
yada-stage.aa.com
secureauthentication-test.snap.aa.com
fsa-api-dev.aa.com
aaira-test.fs.qcorpaa.aa.com
airportagent.nonprod.aa.com
pilotvms-dev.qcorpaa.aa.com
asguard-np.aa.com
ptts-admin-test.aa.com
checkin-stage.aa.com
ublcrewscheduling-dev-eastus-4dec.aa.com
setool-dev.aa.com
elite-stage.aa.com
checkin-qa.aa.com
qa.checkout.aa.com
aaira-stage.fs.aa.com
innersource-dev.aa.com
mpays.stage.aa.com
dss-gids-api-nonprod.aa.com
qadfs.aa.com
setool-stage.aa.com
facebook-stage.snap.aa.com
graph-np.aa.com
resagent-dev.aa.com
web.dss.nonprod.aa.com
pubs-stage.aa.com
dss-gids-uat.aa.com
crewcheckin-stg.aa.com
spot.stage.aa.com
rlplus-cdc-stage.aa.com
isolve.test.aa.com
travelplanner.apps.qcorpaa.aa.com
testreleaseapi.psaairlines.com
charters.stage.aa.com
airpass.stage.aa.com
test.biddinghub.aa.com
rlplus-pdc-stage.aa.com
npcharters.stage.aa.com
fsa-test.aa.com
epays.stage.aa.com
twitter-test.snap.aa.com
qavenmq.oci.aa.com
testrelease.psaairlines.com
travelplanner.apps.sepaas.aa.com
dashboard-service-test.raptor.aa.com
csmstage.aa.com
stage.raptor.aa.com
snapui-test.snap.aa.com
airportal.nonprod.aa.com
www.airpass.stage.aa.com
sscmteste.aa.com
stage.squad360.aa.com
faportal-trng.aa.com
ublcrewscheduling-dev-eastus-tdec.aa.com
testaos.psaairlines.com
resagent-qa.aa.com
twitter-stage.snap.aa.com
aaira-dev.fs.qcorpaa.aa.com
mctschedule-stg.aa.com
pilot-tts-test.aa.com
fsa-api-uat.aa.com
dashboard-service-stage.raptor.aa.com
rfdb-stg.aa.com
stage.reaccom.aa.com
ptts-admin-stage.aa.com
secureauthentication-stage.snap.aa.com
dss-gids-nonprod.aa.com
stage.biddinghub.aa.com
fsa-uat.aa.com
admin.businessextra.stage.aa.com
cci-tst.qcorpaa.aa.com
stage.checkout.aa.com
faportal-test.qcorpaa.aa.com
innovations.stage.aa.com
my.stage.aa.com
mctsearch-stg.aa.com
travelplanner.apps.depaas.qcorpaa.aa.com
cci-stg.aa.com
ublcrewscheduling-uat.aa.com
qa.reaccom.aa.com
fsa-dev.aa.com
snapui-stage.snap.aa.com
setoolapi-dev.aa.com
isolve.stage.aa.com
fsa-api-test.aa.com
resagent-stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for yada-beta.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDRrkiaolWrN2uXQmw3/
tR+7BLoJUqufEylm92rJyZHcmPLqPO32INU34r5AVriiSdsRs1Xl7x2aipJl5S3T
Kca/Ubo/g7rUeR7VsQC1eVBSdCrIGAb6IRwxRIEuqPnpUL6FWU0P8JYVg7s03C59
GvShgd2DpwNAqIY+Wf+pNBEJHBCZjI/Q4QDzKiisI9DgbvBf+Td/T398lcCWvYpz
k+K7z1bmbhQ+hx1kYGunQt6Ag+8Kuy/ybBJGskSKVHqvmRNaRP64VE8E7UewWyQZ
YzY4F7qXMXmxBI5wLG4kKCM9r9VJibBEMTalRGNylM31fPkc8PKuJcj6PntqQ1qn
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3214041953158653715922254105815340354
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yada-beta.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20223978158035086808666728723505058411268032159825922648250399281429864801248541491107566120580408385199201429547415298971474389380264178520909791792101343922799484608616278794976090707574272906143765916432819574643172275295043747623203755258937871249377672808665769809852420423975691933754369325737162545727736035020368682434172668683331970026773568196595917106390032905317397806383660677903503708907377875850465929692093067392909301568120884683079324999681541852273494256362635851378125689227193040486292920561765151881472362937972733841497780138456616008998171382280775961777129005004582107372469069694246904833863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdd2d3d54092fa0632b5f0ebbe2a4f22ec060663
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yada-beta.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.azd.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest30.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fapbs-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yada-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-test.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotvms-dev.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asguard-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-4dec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-stage.fs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innersource-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadfs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graph-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dss.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubs-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcheckin-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spot.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-cdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testreleaseapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-pdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcharters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qavenmq.oci.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrelease.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.sepaas.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportal.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmteste.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-trng.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-tdec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testaos.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-dev.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctschedule-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfdb-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-tst.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-test.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovations.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctsearch-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.depaas.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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