yada-beta.stage.aa.com

- American Airlines Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 02:39:26:f0:41:fc:e9:80:b7:cf:88:96:bc:5b:3e:7f was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:39:26:f0:41:fc:e9:80:b7:cf:88:96:bc:5b:3e:7f
Serial Number (int): 2955206679252536738300006148823793279
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 11:dd:65:3d:f5:cd:75:7e:06:e6:76:ed:76:95:42:67:8e:c4:84:a1
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 72:96:fc:a3:b5:3b:ae:89:a0:82:c7:6c:4c:4d:10:fa:c1:04:3a:b5
Fingerprint (sha256): 07:f6:4c:08:8f:4b:33:bd:d0:fb:26:50:0f:92:63:b7:20:28:77:7f:5d:ed:e7:f6:5d:a5:55:2f:51:b5:56:12

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate yada-beta.stage.aa.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yada-beta.stage.aa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

yada-beta.stage.aa.com
www.elite-stage.aa.com
www.airpass.stage.aa.com
web.dss.nonprod.aa.com
ublcrewscheduling-uat.aa.com
ublcrewscheduling-test.aa.com
ublcrewscheduling-dev-eastus-tdec.aa.com
ublcrewscheduling-dev-eastus-4dec.aa.com
twitter-test.snap.aa.com
twitter-stage.snap.aa.com
travelplanner.apps.sepaas.aa.com
travelplanner.apps.qcorpaa.aa.com
travelplanner.apps.depaas.qcorpaa.aa.com
testreleaseapi.psaairlines.com
testrelease.psaairlines.com
testaos.psaairlines.com
test.raptor.aa.com
test.biddinghub.aa.com
stage.squad360.aa.com
stage.reaccom.aa.com
stage.raptor.aa.com
stage.pubs.aa.com
stage.checkout.aa.com
stage.biddinghub.aa.com
sscmteste.aa.com
snapui-test.snap.aa.com
snapui-stage.snap.aa.com
setoolapi-test.aa.com
setoolapi-dev.aa.com
setool-test.aa.com
setool-stage.aa.com
setool-dev.aa.com
secureauthentication-test.snap.aa.com
secureauthentication-stage.snap.aa.com
rlplus-pdc-stage.aa.com
rlplus-cdc-stage.aa.com
rfdb-stg.aa.com
resagent-stage.aa.com
resagent-qa.aa.com
resagent-dev.aa.com
qavenmq.oci.aa.com
qadfs.aa.com
qa.reaccom.aa.com
qa.checkout.aa.com
ptts-admin-test.aa.com
ptts-admin-stage.aa.com
pltapim-dev.aa.com
pilotvms-dev.qcorpaa.aa.com
pilot-tts-test.aa.com
pilot-tts-stage.aa.com
pdb-dev.aa.com
npcharters.stage.aa.com
my.stage.aa.com
mpays.stage.aa.com
mctsearch-stg.aa.com
mctschedule-stg.aa.com
isolve.test.aa.com
isolve.stage.aa.com
innovations.stage.aa.com
innersource-dev.aa.com
graph-np.aa.com
get.azd.aa.com
fsa-uat.aa.com
fsa-test.aa.com
fsa-dev.aa.com
fsa-api-uat.aa.com
fsa-api-test.aa.com
fsa-api-dev.aa.com
faportal-trng.aa.com
faportal-test.qcorpaa.aa.com
fapbs-stg.aa.com
facebook-test.snap.aa.com
facebook-stage.snap.aa.com
epays.stage.aa.com
elite-stage.aa.com
dss-gids-uat.aa.com
dss-gids-nonprod.aa.com
dss-gids-api-uat.aa.com
dss-gids-api-nonprod.aa.com
dev.squad360.aa.com
dashboard-service-test.raptor.aa.com
dashboard-service-stage.raptor.aa.com
csmstage.aa.com
crewcheckin-stg.aa.com
checkin-stage.aa.com
checkin-qa.aa.com
charters.stage.aa.com
cci-tst.qcorpaa.aa.com
cci-stg.aa.com
businessextra.stage.aa.com
asguard-np.aa.com
akamaitest30.aa.com
airportal.nonprod.aa.com
airportagent.nonprod.aa.com
airpass.stage.aa.com
admin.businessextra.stage.aa.com
aaira-test.fs.qcorpaa.aa.com
aaira-stage.fs.aa.com
aaira-dev.fs.qcorpaa.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for yada-beta.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOfTCCDWWgAwIBAgIQAjkm8EH86YC3z4iWvFs+fzANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwMjAzMDAwMDAwWhcN
MjExMDAyMjM1OTU5WjBzMQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxEzAR
BgNVBAcTCkZvcnQgV29ydGgxHjAcBgNVBAoTFUFtZXJpY2FuIEFpcmxpbmVzIElu
YzEfMB0GA1UEAxMWeWFkYS1iZXRhLnN0YWdlLmFhLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALUsO2rQOxHMwwR21zgJGsMG2bXM3x3dBrP6fh7U
sQKJO0t58h+pGY4Cb0PoWS8eeQQZj5WFzxwu1a1EDdvqtvtyhDYPzsjEHi2M/2k/
ouf+9DeDokjdT7+KdWMjnpqpvFP3rYzkd7X+hNqOqyVCU6H2H3IWuj1q4uF51HjG
tBwUmWvKYi9BlexUsH5LbntVaPf+KDr9DlLt18H+LPXfFfABiplmsJ0KVR20Y5ME
/mWXdFMv/r1mkCtDK6bjyH/sy2rv1/FbNC++Xbjtn9Gau6qK/D3VhDg1OpBiwq+y
K0JMKXna+Ap6yAVxZw7A1bFb88NwVHU4+O7qDKKL3I7Vd8kCAwEAAaOCCzEwggst
MB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQR3WU9
9c11fgbmdu12lUJnjsSEoTCCCWwGA1UdEQSCCWMwgglfghZ5YWRhLWJldGEuc3Rh
Z2UuYWEuY29tghZ3d3cuZWxpdGUtc3RhZ2UuYWEuY29tghh3d3cuYWlycGFzcy5z
dGFnZS5hYS5jb22CFndlYi5kc3Mubm9ucHJvZC5hYS5jb22CHHVibGNyZXdzY2hl
ZHVsaW5nLXVhdC5hYS5jb22CHXVibGNyZXdzY2hlZHVsaW5nLXRlc3QuYWEuY29t
gih1YmxjcmV3c2NoZWR1bGluZy1kZXYtZWFzdHVzLXRkZWMuYWEuY29tgih1Ymxj
cmV3c2NoZWR1bGluZy1kZXYtZWFzdHVzLTRkZWMuYWEuY29tghh0d2l0dGVyLXRl
c3Quc25hcC5hYS5jb22CGXR3aXR0ZXItc3RhZ2Uuc25hcC5hYS5jb22CIHRyYXZl
bHBsYW5uZXIuYXBwcy5zZXBhYXMuYWEuY29tgiF0cmF2ZWxwbGFubmVyLmFwcHMu
cWNvcnBhYS5hYS5jb22CKHRyYXZlbHBsYW5uZXIuYXBwcy5kZXBhYXMucWNvcnBh
YS5hYS5jb22CHnRlc3RyZWxlYXNlYXBpLnBzYWFpcmxpbmVzLmNvbYIbdGVzdHJl
bGVhc2UucHNhYWlybGluZXMuY29tghd0ZXN0YW9zLnBzYWFpcmxpbmVzLmNvbYIS
dGVzdC5yYXB0b3IuYWEuY29tghZ0ZXN0LmJpZGRpbmdodWIuYWEuY29tghVzdGFn
ZS5zcXVhZDM2MC5hYS5jb22CFHN0YWdlLnJlYWNjb20uYWEuY29tghNzdGFnZS5y
YXB0b3IuYWEuY29tghFzdGFnZS5wdWJzLmFhLmNvbYIVc3RhZ2UuY2hlY2tvdXQu
YWEuY29tghdzdGFnZS5iaWRkaW5naHViLmFhLmNvbYIQc3NjbXRlc3RlLmFhLmNv
bYIXc25hcHVpLXRlc3Quc25hcC5hYS5jb22CGHNuYXB1aS1zdGFnZS5zbmFwLmFh
LmNvbYIVc2V0b29sYXBpLXRlc3QuYWEuY29tghRzZXRvb2xhcGktZGV2LmFhLmNv
bYISc2V0b29sLXRlc3QuYWEuY29tghNzZXRvb2wtc3RhZ2UuYWEuY29tghFzZXRv
b2wtZGV2LmFhLmNvbYIlc2VjdXJlYXV0aGVudGljYXRpb24tdGVzdC5zbmFwLmFh
LmNvbYImc2VjdXJlYXV0aGVudGljYXRpb24tc3RhZ2Uuc25hcC5hYS5jb22CF3Js
cGx1cy1wZGMtc3RhZ2UuYWEuY29tghdybHBsdXMtY2RjLXN0YWdlLmFhLmNvbYIP
cmZkYi1zdGcuYWEuY29tghVyZXNhZ2VudC1zdGFnZS5hYS5jb22CEnJlc2FnZW50
LXFhLmFhLmNvbYITcmVzYWdlbnQtZGV2LmFhLmNvbYIScWF2ZW5tcS5vY2kuYWEu
Y29tggxxYWRmcy5hYS5jb22CEXFhLnJlYWNjb20uYWEuY29tghJxYS5jaGVja291
dC5hYS5jb22CFnB0dHMtYWRtaW4tdGVzdC5hYS5jb22CF3B0dHMtYWRtaW4tc3Rh
Z2UuYWEuY29tghJwbHRhcGltLWRldi5hYS5jb22CG3BpbG90dm1zLWRldi5xY29y
cGFhLmFhLmNvbYIVcGlsb3QtdHRzLXRlc3QuYWEuY29tghZwaWxvdC10dHMtc3Rh
Z2UuYWEuY29tgg5wZGItZGV2LmFhLmNvbYIXbnBjaGFydGVycy5zdGFnZS5hYS5j
b22CD215LnN0YWdlLmFhLmNvbYISbXBheXMuc3RhZ2UuYWEuY29tghRtY3RzZWFy
Y2gtc3RnLmFhLmNvbYIWbWN0c2NoZWR1bGUtc3RnLmFhLmNvbYISaXNvbHZlLnRl
c3QuYWEuY29tghNpc29sdmUuc3RhZ2UuYWEuY29tghhpbm5vdmF0aW9ucy5zdGFn
ZS5hYS5jb22CFmlubmVyc291cmNlLWRldi5hYS5jb22CD2dyYXBoLW5wLmFhLmNv
bYIOZ2V0LmF6ZC5hYS5jb22CDmZzYS11YXQuYWEuY29tgg9mc2EtdGVzdC5hYS5j
b22CDmZzYS1kZXYuYWEuY29tghJmc2EtYXBpLXVhdC5hYS5jb22CE2ZzYS1hcGkt
dGVzdC5hYS5jb22CEmZzYS1hcGktZGV2LmFhLmNvbYIUZmFwb3J0YWwtdHJuZy5h
YS5jb22CHGZhcG9ydGFsLXRlc3QucWNvcnBhYS5hYS5jb22CEGZhcGJzLXN0Zy5h
YS5jb22CGWZhY2Vib29rLXRlc3Quc25hcC5hYS5jb22CGmZhY2Vib29rLXN0YWdl
LnNuYXAuYWEuY29tghJlcGF5cy5zdGFnZS5hYS5jb22CEmVsaXRlLXN0YWdlLmFh
LmNvbYITZHNzLWdpZHMtdWF0LmFhLmNvbYIXZHNzLWdpZHMtbm9ucHJvZC5hYS5j
b22CF2Rzcy1naWRzLWFwaS11YXQuYWEuY29tghtkc3MtZ2lkcy1hcGktbm9ucHJv
ZC5hYS5jb22CE2Rldi5zcXVhZDM2MC5hYS5jb22CJGRhc2hib2FyZC1zZXJ2aWNl
LXRlc3QucmFwdG9yLmFhLmNvbYIlZGFzaGJvYXJkLXNlcnZpY2Utc3RhZ2UucmFw
dG9yLmFhLmNvbYIPY3Ntc3RhZ2UuYWEuY29tghZjcmV3Y2hlY2tpbi1zdGcuYWEu
Y29tghRjaGVja2luLXN0YWdlLmFhLmNvbYIRY2hlY2tpbi1xYS5hYS5jb22CFWNo
YXJ0ZXJzLnN0YWdlLmFhLmNvbYIWY2NpLXRzdC5xY29ycGFhLmFhLmNvbYIOY2Np
LXN0Zy5hYS5jb22CGmJ1c2luZXNzZXh0cmEuc3RhZ2UuYWEuY29tghFhc2d1YXJk
LW5wLmFhLmNvbYITYWthbWFpdGVzdDMwLmFhLmNvbYIYYWlycG9ydGFsLm5vbnBy
b2QuYWEuY29tghthaXJwb3J0YWdlbnQubm9ucHJvZC5hYS5jb22CFGFpcnBhc3Mu
c3RhZ2UuYWEuY29tgiBhZG1pbi5idXNpbmVzc2V4dHJhLnN0YWdlLmFhLmNvbYIc
YWFpcmEtdGVzdC5mcy5xY29ycGFhLmFhLmNvbYIVYWFpcmEtc3RhZ2UuZnMuYWEu
Y29tghthYWlyYS1kZXYuZnMucWNvcnBhYS5hYS5jb20wDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaAr
hilodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc3LmNybDAvoC2g
K4YpaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNy5jcmwwPgYD
VR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAChjpodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJlU2VydmVyQ0EuY3J0MAwGA1Ud
EwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEB
AKnLjnx0A2AvYTR0hKGN/hjeh1FWPaM/HSt00p0vzGevPNfvQBAYwBCVMIXjIMRz
M3bBbcCQ5Zz+mFFHWMHtwqF3poVkJKjzYU/HTCTI7jL8XjrzmU940u3qSZNZlxI/
0OyIuXTcYBI0GjiLxVGRXZ6hl7zbPSqrX5GYMY7YUzhaIW+xRgHeohXLnXsSAQJz
DAzuFTZeUsa2oGGEsPQKByebJiCt8xXaIACU+yKKuVk9kYyULSvN7xAI49DUzxK0
n7lNTERGYdHsdUCMcCp9YYMEk+B4lx3Ge57Acqfr7Y90N5CtwjzDEFSf+xX9T9i9
mXbYAComqaY/oiZOB/TL8+Y=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtSw7atA7EczDBHbXOAka
wwbZtczfHd0Gs/p+HtSxAok7S3nyH6kZjgJvQ+hZLx55BBmPlYXPHC7VrUQN2+q2
+3KENg/OyMQeLYz/aT+i5/70N4OiSN1Pv4p1YyOemqm8U/etjOR3tf6E2o6rJUJT
ofYfcha6PWri4XnUeMa0HBSZa8piL0GV7FSwfktue1Vo9/4oOv0OUu3Xwf4s9d8V
8AGKmWawnQpVHbRjkwT+ZZd0Uy/+vWaQK0MrpuPIf+zLau/X8Vs0L75duO2f0Zq7
qor8PdWEODU6kGLCr7IrQkwpedr4CnrIBXFnDsDVsVvzw3BUdTj47uoMoovcjtV3
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2955206679252536738300006148823793279
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yada-beta.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22870944859604626632294897366291464857478710289624173339701041946218436569518962088586856271547952638411232233916776549162544985705808240785523717802189264711965226746389955482522817396127458384403850181997306592763690831156416098935577920390072787982019011509641561847227441939079107027171371041077177056788185724985343337494991165741546840106264878376312433678147812905547670034739946519824650085609681438387537284779394332041698842024415021243824116076326423801512050977743881026318366702807775576105112804087709893615907101865201071455061821426011573436492359485133239823815416981280055114059175248962981736052681
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11dd653df5cd757e06e676ed769542678ec484a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yada-beta.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dss.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-tdec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-4dec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.sepaas.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.depaas.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testreleaseapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrelease.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testaos.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.pubs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmteste.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-pdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-cdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfdb-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qavenmq.oci.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadfs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pltapim-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotvms-dev.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcharters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctsearch-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctschedule-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovations.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innersource-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graph-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.azd.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-trng.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-test.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fapbs-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcheckin-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-tst.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asguard-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest30.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportal.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-test.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-stage.fs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-dev.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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