premium-mobile.stage.aa.com
- American Airlines Inc -
Issued by DigiCert SHA2 Secure Server CA
About this certificate
This digital certificate with serial number 0e:b9:0d:e1:c9:b0:8d:8d:c5:2b:fe:0c:85:fa:01:78 was issued on by DigiCert Inc.
With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
American Airlines Inc
Organization:
American Airlines Inc
State / Province:
Texas
Locality: Fort Worth
Country: US
Locality: Fort Worth
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:b9:0d:e1:c9:b0:8d:8d:c5:2b:fe:0c:85:fa:01:78Serial Number (int): 19570048419899104900338171867148452216
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 24:aa:8d:8d:fe:39:45:91:02:36:e1:28:99:ed:d7:5e:cc:cd:2a:62
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2
Fingerprint (sha1): 1a:51:ee:a0:d5:3a:f2:89:2e:2c:ea:6e:70:98:01:cc:7a:e8:72:00
Fingerprint (sha256): 11:59:97:5e:f9:64:ff:51:e8:c3:1a:d9:52:36:76:78:74:dd:94:c0:b4:7e:fe:70:0c:4a:02:54:c8:34:8b:10
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl
Check the revocation status for certificate premium-mobile.stage.aa.com
99
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for premium-mobile.stage.aa.com
Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aairpass.stage.aa.com
aairpass.test.aa.com
achievements-dev.aa.com
agentassist.nonprod.aa.com
agentassist.test.aa.com
airpass.api.dev.aa.com
airpass.api.qa.aa.com
airpass.api.stage.aa.com
airpass.stage.aa.com
airpass.test.aa.com
airportagent.test.aa.com
akamaitest4.aa.com
apc-dev.aa.com
apc-stage.aa.com
api.np.bags.aa.com
asmdev1.aa.com
asmdev2.aa.com
bagsecurity.app.np.bags.aa.com
cabin.nonprod.aa.com
cn.nonprod.feature.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.services.aa.com
compensation.stage.aa.com
compensation.test.aa.com
config.app.np.bags.aa.com
corporateexperienceframework-uat.aa.com
crewcompensation.stage.aa.com
crewcompensation.test.aa.com
crmwebstage.aa.com
ctapmphx.aa.com
customermdm.nonprod.services.aa.com
dev.base.aa.com
dev.marketdata.aa.com
developer-nonprod.aa.com
deviate.app.np.bags.aa.com
envoycrew.qcorpaa.aa.com
envoycrewstage.aa.com
falcon.app.np.bags.aa.com
faportal-stage.aa.com
featureflags-api-np.aa.com
featureflags-np.aa.com
flightweb-dev.aa.com
flightweb-stage.aa.com
frd.stage.aa.com
frd.stg.aa.com
globalsales-stg.aa.com
hazraps-dev.aa.com
hazraps-stage.aa.com
health.app.np.bags.aa.com
helix.stage.aa.com
kiko.app.np.bags.aa.com
kronosadmin-stage.aa.com
loyalty-upgrades.stage.aa.com
mctapp-stage.aa.com
merch-dev.aa.com
merch-stg.aa.com
newme-stage.aa.com
newmelab.qcorpaa.aa.com
nonprod-login.aa.com
nppgadmin.stage.aa.com
nrta.test.aa.com
owrcm-stg.aa.com
pilot-tts-dev.aa.com
pilot-tts-stage-smoke.aa.com
pilot-tts-uat.aa.com
premium-mobile.stage.aa.com
prime.app.np.bags.aa.com
ptts-admin-dev.aa.com
ptts-admin-stage-smoke.aa.com
ptts-admin-uat.aa.com
qa.admin.aa.com
qa.srflightoptions.aa.com
raven-dev.aa.com
resagent.nonprod.aa.com
safeline.mx.stage.aa.com
sg.np.bags.aa.com
stage.admin.aa.com
stage.base.aa.com
stage.marketdata.aa.com
stage.srflightoptions.aa.com
svcarddetails.stage.aa.com
svcardissue.stage.aa.com
tac.stage.aa.com
techopshub.me.stage.aa.com
test.marketdata.aa.com
testapi.psaairlines.com
testcrewmobile.psaairlines.com
travelplanner.test.aa.com
viper-dev.aa.com
viper-stage.aa.com
viper-test.aa.com
wiki-nonprod.aa.com
www.aairpass.stage.aa.com
www.aairpass.test.aa.com
www.airpass.stage.aa.com
www.airpass.test.aa.com
www.newme-stage.aa.com
www.newmelab.qcorpaa.aa.com
www.nppgadmin.stage.aa.com
aairpass.test.aa.com
achievements-dev.aa.com
agentassist.nonprod.aa.com
agentassist.test.aa.com
airpass.api.dev.aa.com
airpass.api.qa.aa.com
airpass.api.stage.aa.com
airpass.stage.aa.com
airpass.test.aa.com
airportagent.test.aa.com
akamaitest4.aa.com
apc-dev.aa.com
apc-stage.aa.com
api.np.bags.aa.com
asmdev1.aa.com
asmdev2.aa.com
bagsecurity.app.np.bags.aa.com
cabin.nonprod.aa.com
cn.nonprod.feature.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.services.aa.com
compensation.stage.aa.com
compensation.test.aa.com
config.app.np.bags.aa.com
corporateexperienceframework-uat.aa.com
crewcompensation.stage.aa.com
crewcompensation.test.aa.com
crmwebstage.aa.com
ctapmphx.aa.com
customermdm.nonprod.services.aa.com
dev.base.aa.com
dev.marketdata.aa.com
developer-nonprod.aa.com
deviate.app.np.bags.aa.com
envoycrew.qcorpaa.aa.com
envoycrewstage.aa.com
falcon.app.np.bags.aa.com
faportal-stage.aa.com
featureflags-api-np.aa.com
featureflags-np.aa.com
flightweb-dev.aa.com
flightweb-stage.aa.com
frd.stage.aa.com
frd.stg.aa.com
globalsales-stg.aa.com
hazraps-dev.aa.com
hazraps-stage.aa.com
health.app.np.bags.aa.com
helix.stage.aa.com
kiko.app.np.bags.aa.com
kronosadmin-stage.aa.com
loyalty-upgrades.stage.aa.com
mctapp-stage.aa.com
merch-dev.aa.com
merch-stg.aa.com
newme-stage.aa.com
newmelab.qcorpaa.aa.com
nonprod-login.aa.com
nppgadmin.stage.aa.com
nrta.test.aa.com
owrcm-stg.aa.com
pilot-tts-dev.aa.com
pilot-tts-stage-smoke.aa.com
pilot-tts-uat.aa.com
premium-mobile.stage.aa.com
prime.app.np.bags.aa.com
ptts-admin-dev.aa.com
ptts-admin-stage-smoke.aa.com
ptts-admin-uat.aa.com
qa.admin.aa.com
qa.srflightoptions.aa.com
raven-dev.aa.com
resagent.nonprod.aa.com
safeline.mx.stage.aa.com
sg.np.bags.aa.com
stage.admin.aa.com
stage.base.aa.com
stage.marketdata.aa.com
stage.srflightoptions.aa.com
svcarddetails.stage.aa.com
svcardissue.stage.aa.com
tac.stage.aa.com
techopshub.me.stage.aa.com
test.marketdata.aa.com
testapi.psaairlines.com
testcrewmobile.psaairlines.com
travelplanner.test.aa.com
viper-dev.aa.com
viper-stage.aa.com
viper-test.aa.com
wiki-nonprod.aa.com
www.aairpass.stage.aa.com
www.aairpass.test.aa.com
www.airpass.stage.aa.com
www.airpass.test.aa.com
www.newme-stage.aa.com
www.newmelab.qcorpaa.aa.com
www.nppgadmin.stage.aa.com
Other certificates including the domain name aa.com
(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com
Certificate
The complete raw certificate details for premium-mobile.stage.aa.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINnzCCDIegAwIBAgIQDrkN4cmwjY3FK/4MhfoBeDANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjExMjI0MDAwMDAwWhcN MjIxMjI0MjM1OTU5WjB4MQswCQYDVQQGEwJVUzEOMAwGA1UECBMFVGV4YXMxEzAR BgNVBAcTCkZvcnQgV29ydGgxHjAcBgNVBAoTFUFtZXJpY2FuIEFpcmxpbmVzIElu YzEkMCIGA1UEAxMbcHJlbWl1bS1tb2JpbGUuc3RhZ2UuYWEuY29tMFkwEwYHKoZI zj0CAQYIKoZIzj0DAQcDQgAEb+wX/KdBQOsSw0LFWkdk5CVkPvhkxWK2a9Ih3YZO i8R5lXnGXYtQDnGDaG15EA9HwdZXBjcTq7O8uB/ChCyj46OCCxkwggsVMB8GA1Ud IwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBQkqo2N/jlFkQI2 4SiZ7ddezM0qYjCCCVAGA1UdEQSCCUcwgglDghVhYWlycGFzcy5zdGFnZS5hYS5j b22CFGFhaXJwYXNzLnRlc3QuYWEuY29tghdhY2hpZXZlbWVudHMtZGV2LmFhLmNv bYIaYWdlbnRhc3Npc3Qubm9ucHJvZC5hYS5jb22CF2FnZW50YXNzaXN0LnRlc3Qu YWEuY29tghZhaXJwYXNzLmFwaS5kZXYuYWEuY29tghVhaXJwYXNzLmFwaS5xYS5h YS5jb22CGGFpcnBhc3MuYXBpLnN0YWdlLmFhLmNvbYIUYWlycGFzcy5zdGFnZS5h YS5jb22CE2FpcnBhc3MudGVzdC5hYS5jb22CGGFpcnBvcnRhZ2VudC50ZXN0LmFh LmNvbYISYWthbWFpdGVzdDQuYWEuY29tgg5hcGMtZGV2LmFhLmNvbYIQYXBjLXN0 YWdlLmFhLmNvbYISYXBpLm5wLmJhZ3MuYWEuY29tgg5hc21kZXYxLmFhLmNvbYIO YXNtZGV2Mi5hYS5jb22CHmJhZ3NlY3VyaXR5LmFwcC5ucC5iYWdzLmFhLmNvbYIU Y2FiaW4ubm9ucHJvZC5hYS5jb22CGWNuLm5vbnByb2QuZmVhdHVyZS5hYS5jb22C GmNuLm5vbnByb2QucGxhdGZvcm0uYWEuY29tghpjbi5ub25wcm9kLnNlcnZpY2Vz LmFhLmNvbYIZY29tcGVuc2F0aW9uLnN0YWdlLmFhLmNvbYIYY29tcGVuc2F0aW9u LnRlc3QuYWEuY29tghljb25maWcuYXBwLm5wLmJhZ3MuYWEuY29tgidjb3Jwb3Jh dGVleHBlcmllbmNlZnJhbWV3b3JrLXVhdC5hYS5jb22CHWNyZXdjb21wZW5zYXRp b24uc3RhZ2UuYWEuY29tghxjcmV3Y29tcGVuc2F0aW9uLnRlc3QuYWEuY29tghJj cm13ZWJzdGFnZS5hYS5jb22CD2N0YXBtcGh4LmFhLmNvbYIjY3VzdG9tZXJtZG0u bm9ucHJvZC5zZXJ2aWNlcy5hYS5jb22CD2Rldi5iYXNlLmFhLmNvbYIVZGV2Lm1h cmtldGRhdGEuYWEuY29tghhkZXZlbG9wZXItbm9ucHJvZC5hYS5jb22CGmRldmlh dGUuYXBwLm5wLmJhZ3MuYWEuY29tghhlbnZveWNyZXcucWNvcnBhYS5hYS5jb22C FWVudm95Y3Jld3N0YWdlLmFhLmNvbYIZZmFsY29uLmFwcC5ucC5iYWdzLmFhLmNv bYIVZmFwb3J0YWwtc3RhZ2UuYWEuY29tghpmZWF0dXJlZmxhZ3MtYXBpLW5wLmFh LmNvbYIWZmVhdHVyZWZsYWdzLW5wLmFhLmNvbYIUZmxpZ2h0d2ViLWRldi5hYS5j b22CFmZsaWdodHdlYi1zdGFnZS5hYS5jb22CEGZyZC5zdGFnZS5hYS5jb22CDmZy ZC5zdGcuYWEuY29tghZnbG9iYWxzYWxlcy1zdGcuYWEuY29tghJoYXpyYXBzLWRl di5hYS5jb22CFGhhenJhcHMtc3RhZ2UuYWEuY29tghloZWFsdGguYXBwLm5wLmJh Z3MuYWEuY29tghJoZWxpeC5zdGFnZS5hYS5jb22CF2tpa28uYXBwLm5wLmJhZ3Mu YWEuY29tghhrcm9ub3NhZG1pbi1zdGFnZS5hYS5jb22CHWxveWFsdHktdXBncmFk ZXMuc3RhZ2UuYWEuY29tghNtY3RhcHAtc3RhZ2UuYWEuY29tghBtZXJjaC1kZXYu YWEuY29tghBtZXJjaC1zdGcuYWEuY29tghJuZXdtZS1zdGFnZS5hYS5jb22CF25l d21lbGFiLnFjb3JwYWEuYWEuY29tghRub25wcm9kLWxvZ2luLmFhLmNvbYIWbnBw Z2FkbWluLnN0YWdlLmFhLmNvbYIQbnJ0YS50ZXN0LmFhLmNvbYIQb3dyY20tc3Rn LmFhLmNvbYIUcGlsb3QtdHRzLWRldi5hYS5jb22CHHBpbG90LXR0cy1zdGFnZS1z bW9rZS5hYS5jb22CFHBpbG90LXR0cy11YXQuYWEuY29tghtwcmVtaXVtLW1vYmls ZS5zdGFnZS5hYS5jb22CGHByaW1lLmFwcC5ucC5iYWdzLmFhLmNvbYIVcHR0cy1h ZG1pbi1kZXYuYWEuY29tgh1wdHRzLWFkbWluLXN0YWdlLXNtb2tlLmFhLmNvbYIV cHR0cy1hZG1pbi11YXQuYWEuY29tgg9xYS5hZG1pbi5hYS5jb22CGXFhLnNyZmxp Z2h0b3B0aW9ucy5hYS5jb22CEHJhdmVuLWRldi5hYS5jb22CF3Jlc2FnZW50Lm5v bnByb2QuYWEuY29tghhzYWZlbGluZS5teC5zdGFnZS5hYS5jb22CEXNnLm5wLmJh Z3MuYWEuY29tghJzdGFnZS5hZG1pbi5hYS5jb22CEXN0YWdlLmJhc2UuYWEuY29t ghdzdGFnZS5tYXJrZXRkYXRhLmFhLmNvbYIcc3RhZ2Uuc3JmbGlnaHRvcHRpb25z LmFhLmNvbYIac3ZjYXJkZGV0YWlscy5zdGFnZS5hYS5jb22CGHN2Y2FyZGlzc3Vl LnN0YWdlLmFhLmNvbYIQdGFjLnN0YWdlLmFhLmNvbYIadGVjaG9wc2h1Yi5tZS5z dGFnZS5hYS5jb22CFnRlc3QubWFya2V0ZGF0YS5hYS5jb22CF3Rlc3RhcGkucHNh YWlybGluZXMuY29tgh50ZXN0Y3Jld21vYmlsZS5wc2FhaXJsaW5lcy5jb22CGXRy YXZlbHBsYW5uZXIudGVzdC5hYS5jb22CEHZpcGVyLWRldi5hYS5jb22CEnZpcGVy LXN0YWdlLmFhLmNvbYIRdmlwZXItdGVzdC5hYS5jb22CE3dpa2ktbm9ucHJvZC5h YS5jb22CGXd3dy5hYWlycGFzcy5zdGFnZS5hYS5jb22CGHd3dy5hYWlycGFzcy50 ZXN0LmFhLmNvbYIYd3d3LmFpcnBhc3Muc3RhZ2UuYWEuY29tghd3d3cuYWlycGFz cy50ZXN0LmFhLmNvbYIWd3d3Lm5ld21lLXN0YWdlLmFhLmNvbYIbd3d3Lm5ld21l bGFiLnFjb3JwYWEuYWEuY29tghp3d3cubnBwZ2FkbWluLnN0YWdlLmFhLmNvbTAO BgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMG8G A1UdHwRoMGYwMaAvoC2GK2h0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNo YTItZzYtMS5jcmwwMaAvoC2GK2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2Nh LXNoYTItZzYtMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcC ARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUFBwEBBHAwbjAk BggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsGAQUFBzAC hjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEyU2VjdXJl U2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAw DQYJKoZIhvcNAQELBQADggEBANPXRH5doX4XoZt6EJkB1MlQ0le+fO3A3WanvNjf owDeF4uTgZsQjwf3GWrC3xRtpeEWE1+71vAcFCQ8bv8kyrKrLYGkdLVUX93w6CR8 1rVpSAXzcMFk1adLRFwYRVndFzwGNtl810b0fygs4m5X3JhPB0a9YllbLCjIn4AW Apz+H61UZmVUGib0W9891d6LztFNCgy5OwESGaLDokn2P6ewz9oK35D65ck3TzyS HUUGAFHqFkmmRx/4d9WNlBmXsq4I0GoJC0Gv1NrQUjANBYixPocOQTbq2p39+3lj DDFu1vjzMrW43PgMT65Q3o1LdYw9jG7UiCEk7p6vDldphO4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEb+wX/KdBQOsSw0LFWkdk5CVkPvhk xWK2a9Ih3YZOi8R5lXnGXYtQDnGDaG15EA9HwdZXBjcTq7O8uB/ChCyj4w== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19570048419899104900338171867148452216 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-24 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premium-mobile.stage.aa.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey) . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1) . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits) 00046fec17fca74140eb12c342c55a4764e425643ef864c562b66bd221dd864e8bc4799579c65d8b500e7183686d79100f47c1d657063713abb3bcb81fc2842ca3e3 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 24aa8d8dfe3945910236e12899edd75ecccd2a62 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2375 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievements-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.nonprod.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.qa.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest4.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev1.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev2.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsecurity.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabin.nonprod.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.feature.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.platform.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.services.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateexperienceframework-uat.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmwebstage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctapmphx.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermdm.nonprod.services.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.base.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketdata.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-nonprod.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviate.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.qcorpaa.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrewstage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcon.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-api-np.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-np.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stg.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsales-stg.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiko.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronosadmin-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-upgrades.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctapp-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-stg.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newme-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmelab.qcorpaa.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-login.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nppgadmin.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrta.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owrcm-stg.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage-smoke.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-uat.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-mobile.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.app.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage-smoke.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-uat.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.admin.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.srflightoptions.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raven-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent.nonprod.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeline.mx.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.np.bags.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.base.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.marketdata.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.srflightoptions.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcarddetails.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcardissue.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tac.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techopshub.me.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketdata.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.psaairlines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcrewmobile.psaairlines.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-dev.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-nonprod.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.test.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newme-stage.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmelab.qcorpaa.aa.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nppgadmin.stage.aa.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits) 0780 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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