aana-expcluster-c01-sc1.aa.com

- American Airlines Inc -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 67:fd:9a:36:bd:37:7d:cf:f5:3c:6e:99:c0:c3:72:94 was issued on by Entrust, Inc..

With 36 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Company registration number: 0332421
Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:fd:9a:36:bd:37:7d:cf:f5:3c:6e:99:c0:c3:72:94
Serial Number (int): 138227262499015136334900385909898965652
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c9:cc:ae:cd:fe:9e:68:a1:1f:e7:1d:82:33:5a:fd:43:5c:11:9e:7b
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): e2:89:69:7d:14:e1:e0:8a:54:2c:00:6a:a5:7b:67:aa:de:53:ce:cd
Fingerprint (sha256): 15:f9:41:f2:18:19:05:8c:42:e0:dd:95:ad:32:30:e1:0d:59:8c:cb:f5:2d:49:6b:a3:52:01:9c:6c:b8:b4:c3

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate aana-expcluster-c01-sc1.aa.com

36

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aana-expcluster-c01-sc1.aa.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aana-expcluster-c01-sc1.aa.com
aana-expc04-sc1.aa.com
aana-expc03-sc1.aa.com
aana-expc02-sc1.aa.com
aana-expc01-sc1.aa.com
jabbertest.aa.com
psaairlines.com
aa.com
emea.aa.com
apac.aa.com
conference-3-aana-emea-cucm00.emea.aa.com
conference-3-StandAloneClusterfbac9.aa.com
conference-3-aana-us-cucm30.aa.com
conference-3-aana-emea-cucm00.aa.com
conference-2-aana-emea-cucm00.emea.aa.com
conference-2-aana-apac-cucm00.aa.com
conference-2-StandAloneClusterfbac9.aa.com
conference-2-aana-us-cucm40.aa.com
conference-2-StandAloneCluster229bb.aa.com
conference-3-aana-us-cucm10.aa.com
conference-3-StandAloneClusterb23f8.aa.com
conference-2-StandAloneCluster97695.aa.com
conference-4-aana-apac-cucm00.aa.com
conference-3-StandAloneCluster7f1d0.aa.com
conference-2-StandAloneCluster6b812.emea.aa.com
conference-2-StandAloneClusterb23f8.aa.com
conference-2-aana-us-cucm20.aa.com
conference-2-StandAloneCluster7f1d0.aa.com
conference-2-aana-us-cucm30.aa.com
conference-2-aana-us-cucm10.aa.com
conference-3-StandAloneCluster6b812.emea.aa.com
conference-2-aana-emea-cucm00.aa.com
conference-3-aana-us-cucm20.aa.com
conference-4-StandAloneCluster97695.aa.com
conference-3-StandAloneCluster229bb.aa.com
conference-3-aana-us-cucm40.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for aana-expcluster-c01-sc1.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILpTCCCo2gAwIBAgIQZ/2aNr03fc/1PG6ZwMNylDANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDE0IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxTTAeFw0y
MTA3MDYxNTE2NDRaFw0yMjA4MDUxNTE2NDNaMIHcMQswCQYDVQQGEwJVUzEOMAwG
A1UECBMFVGV4YXMxEzARBgNVBAcTCkZvcnQgV29ydGgxEzARBgsrBgEEAYI3PAIB
AxMCVVMxGTAXBgsrBgEEAYI3PAIBAhMIRGVsYXdhcmUxHjAcBgNVBAoTFUFtZXJp
Y2FuIEFpcmxpbmVzIEluYzEdMBsGA1UEDxMUUHJpdmF0ZSBPcmdhbml6YXRpb24x
EDAOBgNVBAUTBzAzMzI0MjExJzAlBgNVBAMTHmFhbmEtZXhwY2x1c3Rlci1jMDEt
c2MxLmFhLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBALngRKSu
im6xwmOAQxt34EnCcw9BaXQmlmxWQHpTx0gqOURs2zB7YX8zciTudig6jqeoURUs
cH8i/f3+i88I1eurhzH0rR1aXa7LfcCDew70a9G0r/V6ZmAa8SAfTIJyxMIaEl+j
h/DbSp77tWQ0ilPHDB5I44mHV9ZzjGXPRRXviSgd8u/CkDoY5n0D5PLCIXfu+Dgl
3FLmQiVTBe6YmTUGOUB97zxh3Oyskh2qWf/x1Z2splVHg/3lt0eUGxIvDaSKsQ9w
HzeG1rVlBN+wqfKxkaKV1mguLtib6p80OtgK49kSi2H9ldaPfYBIDR0RhSMCHx24
OpTyjTXyc+pTAMMSDJwZUUld5Jc1xcHqL36dTVk0mCYrJZTIWBvMkmV7eJvg7rp1
UFiTXRTmgrNa+XSgSPiYbztvXuJzvRH4nv4qsqGBG+BCBlgS+tHNaFIhRyAS7WJB
6iSAN/fNnP9asaL04/nDbTpNSkHZOgzVN/YUz0fy0mSYl9CvVXNgxIeqqULeB8Ko
4GQLfs94DYHIsWLNc8072nuU/vd8RL35JyX+BraH87ALlWFRrcpdQ+Y09lJAaqYi
if3aqMnX0Dd3JLTZ/nx19HSFd0uDGw09OHcfjrrHvYjnJcx4o4WiVhlsk+tAygbP
p//JsTWtKYRWwEcCiZL+ZJs7idSU5t+8a9//AgMBAAGjggaBMIIGfTAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTJzK7N/p5ooR/nHYIzWv1DXBGeezAfBgNVHSMEGDAW
gBTD99C1KjCtrw2RIXA5VN28iXDHOjBoBggrBgEFBQcBAQRcMFowIwYIKwYBBQUH
MAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChidodHRwOi8v
YWlhLmVudHJ1c3QubmV0L2wxbS1jaGFpbjI1Ni5jZXIwMwYDVR0fBCwwKjAooCag
JIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFtLmNybDCCBPsGA1UdEQSC
BPIwggTugh5hYW5hLWV4cGNsdXN0ZXItYzAxLXNjMS5hYS5jb22CFmFhbmEtZXhw
YzA0LXNjMS5hYS5jb22CFmFhbmEtZXhwYzAzLXNjMS5hYS5jb22CFmFhbmEtZXhw
YzAyLXNjMS5hYS5jb22CFmFhbmEtZXhwYzAxLXNjMS5hYS5jb22CEWphYmJlcnRl
c3QuYWEuY29tgg9wc2FhaXJsaW5lcy5jb22CBmFhLmNvbYILZW1lYS5hYS5jb22C
C2FwYWMuYWEuY29tgiljb25mZXJlbmNlLTMtYWFuYS1lbWVhLWN1Y20wMC5lbWVh
LmFhLmNvbYIqY29uZmVyZW5jZS0zLVN0YW5kQWxvbmVDbHVzdGVyZmJhYzkuYWEu
Y29tgiJjb25mZXJlbmNlLTMtYWFuYS11cy1jdWNtMzAuYWEuY29tgiRjb25mZXJl
bmNlLTMtYWFuYS1lbWVhLWN1Y20wMC5hYS5jb22CKWNvbmZlcmVuY2UtMi1hYW5h
LWVtZWEtY3VjbTAwLmVtZWEuYWEuY29tgiRjb25mZXJlbmNlLTItYWFuYS1hcGFj
LWN1Y20wMC5hYS5jb22CKmNvbmZlcmVuY2UtMi1TdGFuZEFsb25lQ2x1c3RlcmZi
YWM5LmFhLmNvbYIiY29uZmVyZW5jZS0yLWFhbmEtdXMtY3VjbTQwLmFhLmNvbYIq
Y29uZmVyZW5jZS0yLVN0YW5kQWxvbmVDbHVzdGVyMjI5YmIuYWEuY29tgiJjb25m
ZXJlbmNlLTMtYWFuYS11cy1jdWNtMTAuYWEuY29tgipjb25mZXJlbmNlLTMtU3Rh
bmRBbG9uZUNsdXN0ZXJiMjNmOC5hYS5jb22CKmNvbmZlcmVuY2UtMi1TdGFuZEFs
b25lQ2x1c3Rlcjk3Njk1LmFhLmNvbYIkY29uZmVyZW5jZS00LWFhbmEtYXBhYy1j
dWNtMDAuYWEuY29tgipjb25mZXJlbmNlLTMtU3RhbmRBbG9uZUNsdXN0ZXI3ZjFk
MC5hYS5jb22CL2NvbmZlcmVuY2UtMi1TdGFuZEFsb25lQ2x1c3RlcjZiODEyLmVt
ZWEuYWEuY29tgipjb25mZXJlbmNlLTItU3RhbmRBbG9uZUNsdXN0ZXJiMjNmOC5h
YS5jb22CImNvbmZlcmVuY2UtMi1hYW5hLXVzLWN1Y20yMC5hYS5jb22CKmNvbmZl
cmVuY2UtMi1TdGFuZEFsb25lQ2x1c3RlcjdmMWQwLmFhLmNvbYIiY29uZmVyZW5j
ZS0yLWFhbmEtdXMtY3VjbTMwLmFhLmNvbYIiY29uZmVyZW5jZS0yLWFhbmEtdXMt
Y3VjbTEwLmFhLmNvbYIvY29uZmVyZW5jZS0zLVN0YW5kQWxvbmVDbHVzdGVyNmI4
MTIuZW1lYS5hYS5jb22CJGNvbmZlcmVuY2UtMi1hYW5hLWVtZWEtY3VjbTAwLmFh
LmNvbYIiY29uZmVyZW5jZS0zLWFhbmEtdXMtY3VjbTIwLmFhLmNvbYIqY29uZmVy
ZW5jZS00LVN0YW5kQWxvbmVDbHVzdGVyOTc2OTUuYWEuY29tgipjb25mZXJlbmNl
LTMtU3RhbmRBbG9uZUNsdXN0ZXIyMjliYi5hYS5jb22CImNvbmZlcmVuY2UtMy1h
YW5hLXVzLWN1Y200MC5hYS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjBLBgNVHSAERDBCMDcGCmCGSAGG+mwKAQIwKTAn
BggrBgEFBQcCARYbaHR0cHM6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAcGBWeBDAEB
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAWH54qHQ1/
bCrnDGHrgaR2Rf76dRttrTJaW8kyT1Wra6qyHXIFoxp1U4aGHF+YCI+FCQUT3diI
HBU+Bcfph7DWrYO0LrhMWd09khdXRCNsGmrtIRNVddn7zZp3lv8cjpp8E9e89Ez0
1vhJFU6ir0iTvb4Eu0R7RFRaGaEuhieUGsqZX0bpnrljLcT2TAhMwSxA5AS402X7
CtoKjQ5GEE3D/AWSix6pAanxA0fLjOHKrL/M064YmTC74ozp3dgQNU8GPCTk0xDd
hcmJvWvqU15paMXW2dYL3pztVZXtXHgczCBfuwRBnigT4TENQdGjvHJoeu7QoEvD
UikRu/GE2EOn
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138227262499015136334900385909898965652
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-06 15:16:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-05 15:16:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0332421'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aana-expcluster-c01-sc1.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758308114217335386050402467080443648011072437898751767155854437613241929977382733912172017025449495603844137642743635718212829774483230972390023510462328891366230158657925476517848385971966243601908512200843304048144911096745369161377710030858297773250745641946641345345671905103353490759810472309066257691485951596842086738229009335350284796517723389924636839097987165136054231849998186519531007877313455788824735999294008955671923015726845856517216965704336281897562496913985265951924002183646056814822702432465758002645072294075627064504276840551387637634729294929198226779481330106537932629967992811579921533348124057433089592930382305550339272411173372962429998917695582946588005635997607986077273541667990931961629150713371631294714387156380269154631224496811194612272646537681473734394511277127716622639044887189535286726975948198490488450375307587090017598725514613219328788000093260655005360799394403792401909638654183255040893628060315001505299887985279580710738811443203952859849045934743255214161614738974542456635740964449646342200610665149403677937376703335047049843289208422942928512525836232496095049315952059534134649437947336893216365938626753674198953556038097945715202706297204791804481568772384995168168310464511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9ccaecdfe9e68a11fe71d82335afd435c119e7b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana-expcluster-c01-sc1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana-expc04-sc1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana-expc03-sc1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana-expc02-sc1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aana-expc01-sc1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jabbertest.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emea.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-emea-cucm00.emea.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-StandAloneClusterfbac9.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-us-cucm30.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-emea-cucm00.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-emea-cucm00.emea.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-apac-cucm00.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneClusterfbac9.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-us-cucm40.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneCluster229bb.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-us-cucm10.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-StandAloneClusterb23f8.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneCluster97695.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-4-aana-apac-cucm00.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-StandAloneCluster7f1d0.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneCluster6b812.emea.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneClusterb23f8.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-us-cucm20.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-StandAloneCluster7f1d0.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-us-cucm30.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-us-cucm10.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-StandAloneCluster6b812.emea.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-2-aana-emea-cucm00.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-us-cucm20.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-4-StandAloneCluster97695.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-StandAloneCluster229bb.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference-3-aana-us-cucm40.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00161f9e2a1d0d7f6c2ae70c61eb81a47645fefa751b6dad325a5bc9324f55ab6baab21d7205a31a755386861c5f98088f85090513ddd8881c153e05c7e987b0d6ad83b42eb84c59dd3d92175744236c1a6aed21135575d9fbcd9a7796ff1c8e9a7c13d7bcf44cf4d6f849154ea2af4893bdbe04bb447b44545a19a12e8627941aca995f46e99eb9632dc4f64c084cc12c40e404b8d365fb0ada0a8d0e46104dc3fc05928b1ea901a9f10347cb8ce1caacbfccd3ae189930bbe28ce9ddd810354f063c24e4d310dd85c989bd6bea535e6968c5d6d9d60bde9ced5595ed5c781ccc205fbb04419e2813e1310d41d1a3bc72687aeed0a04bc3522911bbf184d843a7