release.psaairlines.com

- American Airlines, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:07:e3:30:e7:70:29:2d:33:e1:52:8c:43:29:e6:29 was issued on by DigiCert Inc.

With 47 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines, Inc.

Organization: American Airlines, Inc.
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:e3:30:e7:70:29:2d:33:e1:52:8c:43:29:e6:29
Serial Number (int): 4028638046922952437380765414742156841
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f1:ee:32:c8:cd:38:65:1c:44:a1:8a:96:30:36:1d:9d:c3:c3:d5:f8
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): d9:b6:a7:7e:74:e9:96:00:ad:e0:86:96:01:82:f9:a4:97:90:3b:be
Fingerprint (sha256): 17:42:93:25:53:fd:c8:f4:a8:66:4d:91:3d:db:af:af:73:a5:f1:dd:6a:b3:13:cb:f1:56:16:8b:2d:79:7c:5f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate release.psaairlines.com

47

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for release.psaairlines.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

release.psaairlines.com
aeregionals.com
amp.psaairlines.com
aos.psaairlines.com
api.psaairlines.com
crewmobile.psaairlines.com
Crewsuite.psaairlines.com
dh.psaairlines.com
emp.piedmont-airlines.com
envoyair.com
envoycadets.com
envoycrew.aa.com
envoypilots.com
manuals.piedmont-airlines.com
mdt.manuals.piedmont-airlines.com
myenvoyair.com
Notify.psaairlines.com
paydocs.envoyair.com
paydocs.stage.envoyair.com
Piedmont-airlines.com
planningvalidator.psaairlines.com
planningvalidatorapi.psaairlines.com
psaairlines.com
regionaltraining.aa.com
release.piedmont-airlines.com
releaseapi.psaairlines.com
sbywebl1.piedmont-airlines.com
skytech.psaairlines.com
skytech.stage.psaairlines.com
Testamp.psaairlines.com
testaos.psaairlines.com
Testcrewsuite.psaairlines.com
Testnotify.psaairlines.com
testplanningvalidator.psaairlines.com
testplanningvalidatorapi.psaairlines.com
testrelease.piedmont-airlines.com
testrelease.psaairlines.com
Testtokenservice.psaairlines.com
Tokenservice.psaairlines.com
Tokensvc.psaairlines.com
www.envoyair.com
www.envoycadet.com
www.envoycadets.com
www.envoypilots.com
www.myenvoyair.com
www.piedmont-airlines.com
www.psaairlines.com

Other certificates including the domain name psaairlines.com

(limited to 100 certificates)
release.psaairlines.com
psaairlines.com
aaapac-expcluster-e01-hon1.aa.com
aana-expcluster-e01-bv1.aa.com
premium-mobile.stage.aa.com
psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
tokenservice.psaairlines.com
vpn.psaairlines.com
aana-cups21-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
mcweb.psaairlines.com
aaemea-cups01-ams1-ms.aa.com
release.psaairlines.com
yada-beta.stage.aa.com
ctwst.psaairlines.com
release.psaairlines.com
release.psaairlines.com
premium-mobile.stage.aa.com
yada-beta.stage.aa.com
aaapac-expc01-sin1.aa.com
release.psaairlines.com
c3008021ipr101-ms.corpaa.aa.com
*.psaairlines.com
premium-mobile.stage.aa.com
ctws.psaairlines.com
aos2.psaairlines.com
aana-expcluster-e01-sc1.aa.com
psaairlines.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
aaapac-expe01-sin1.aa.com
aana-expcluster-e01-sc1.aa.com
aaemea-expe01-ams1.aa.com
yada-beta.stage.aa.com
release.psaairlines.com
planningvalidatorapi.psaairlines.com
aana-expcluster-c01-sc1.aa.com
premium-mobile.stage.aa.com
sni1fe0fgl.wpc.edgecastcdn.net
aos.stage.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
release.psaairlines.com
aaapac-expcluster-c01-sin1.aa.com
aana-expcluster-e01-bv1.aa.com
aana-expcluster-c01-bv1.aa.com
testreleaseapi.psaairlines.com
psaairlines.com
ftweb.psaairlines.com
yada-beta.stage.aa.com
aana-expcluster-c01-sc1.aa.com
testtokenservice.psaairlines.com
testplanningvalidatorapi.psaairlines.com
tokenservice.psaairlines.com
emp.psaairlines.com
release.psaairlines.com
aana-expcluster-c01-sc1.aa.com
testrelease.psaairlines.com
release.psaairlines.com
aana-expcluster-e01-bv1.aa.com
planningvalidatorapi.psaairlines.com
aaemea-expe01-lon1.aa.com
ctwst.psaairlines.com
premium-mobile.stage.aa.com
testreleaseapi.psaairlines.com
release.psaairlines.com
www.psaairlines.com
aana-expcluster-c01-bv1.aa.com
psaairlines.com
premium-mobile.stage.aa.com
c3008011ipr001-ms.corpaa.aa.com
psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
psaairlines.com
psaairlines.com
aana-expcluster-e01-sc1.aa.com
premium-mobile.stage.aa.com
aana-expcluster-e01-bv1.aa.com
yada-beta.stage.aa.com
aaapac-cups01-hon1.aa.com
aana-expcluster-c01-bv1.aa.com
release.psaairlines.com
psaairlines.com
yada-beta.stage.aa.com
release.psaairlines.com
psaairlines.com
ctwst.psaairlines.com
planningvalidatorapi.psaairlines.com
psaairlines.com
sni11976gl.wpc.edgecastcdn.net
premium-mobile.stage.aa.com
release.psaairlines.com
premium-mobile.stage.aa.com

Certificate

The complete raw certificate details for release.psaairlines.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJ/jCCCOagAwIBAgIQAwfjMOdwKS0z4VKMQynmKTANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA3MjgwMDAwMDBa
Fw0yMzExMDgyMzU5NTlaMHYxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczET
MBEGA1UEBxMKRm9ydCBXb3J0aDEgMB4GA1UEChMXQW1lcmljYW4gQWlybGluZXMs
IEluYy4xIDAeBgNVBAMTF3JlbGVhc2UucHNhYWlybGluZXMuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfiy35YQ1FQ309Hu+Oi+ZLgTQUXaWz7Y
nsJkeOqDgJHQSj5mVTETXW+zAza3BoU+5OKVNPduVN/e+h37x7Cuu0xS8+KJc6+z
NkRQNe38Hxh4UXpl5iE+Zro0JM1uyt8hV0zCi81fB+qGFP7ZQA3ejH493BDJwEhX
xtDKhwLDlghSlrrkcdj08KQUG3tIEy82XoOR1wYjx5mhscn3g8LoUWaDf7BJnX2u
kk1UryMuf45JPXRywknIFYFYiVZNFvXNccqp7tuzQleLgW0kCocKsMoY89oWWCE/
kbk+K5SYgn/PhC2HHtGsN9MHaH72zJ8PqfdezizQ5MS7B0ReTUx3ywIDAQABo4IG
rTCCBqkwHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYE
FPHuMsjNOGUcRKGKljA2HZ3Dw9X4MIIEwwYDVR0RBIIEujCCBLaCF3JlbGVhc2Uu
cHNhYWlybGluZXMuY29tgg9hZXJlZ2lvbmFscy5jb22CE2FtcC5wc2FhaXJsaW5l
cy5jb22CE2Fvcy5wc2FhaXJsaW5lcy5jb22CE2FwaS5wc2FhaXJsaW5lcy5jb22C
GmNyZXdtb2JpbGUucHNhYWlybGluZXMuY29tghlDcmV3c3VpdGUucHNhYWlybGlu
ZXMuY29tghJkaC5wc2FhaXJsaW5lcy5jb22CGWVtcC5waWVkbW9udC1haXJsaW5l
cy5jb22CDGVudm95YWlyLmNvbYIPZW52b3ljYWRldHMuY29tghBlbnZveWNyZXcu
YWEuY29tgg9lbnZveXBpbG90cy5jb22CHW1hbnVhbHMucGllZG1vbnQtYWlybGlu
ZXMuY29tgiFtZHQubWFudWFscy5waWVkbW9udC1haXJsaW5lcy5jb22CDm15ZW52
b3lhaXIuY29tghZOb3RpZnkucHNhYWlybGluZXMuY29tghRwYXlkb2NzLmVudm95
YWlyLmNvbYIacGF5ZG9jcy5zdGFnZS5lbnZveWFpci5jb22CFVBpZWRtb250LWFp
cmxpbmVzLmNvbYIhcGxhbm5pbmd2YWxpZGF0b3IucHNhYWlybGluZXMuY29tgiRw
bGFubmluZ3ZhbGlkYXRvcmFwaS5wc2FhaXJsaW5lcy5jb22CD3BzYWFpcmxpbmVz
LmNvbYIXcmVnaW9uYWx0cmFpbmluZy5hYS5jb22CHXJlbGVhc2UucGllZG1vbnQt
YWlybGluZXMuY29tghpyZWxlYXNlYXBpLnBzYWFpcmxpbmVzLmNvbYIec2J5d2Vi
bDEucGllZG1vbnQtYWlybGluZXMuY29tghdza3l0ZWNoLnBzYWFpcmxpbmVzLmNv
bYIdc2t5dGVjaC5zdGFnZS5wc2FhaXJsaW5lcy5jb22CF1Rlc3RhbXAucHNhYWly
bGluZXMuY29tghd0ZXN0YW9zLnBzYWFpcmxpbmVzLmNvbYIdVGVzdGNyZXdzdWl0
ZS5wc2FhaXJsaW5lcy5jb22CGlRlc3Rub3RpZnkucHNhYWlybGluZXMuY29tgiV0
ZXN0cGxhbm5pbmd2YWxpZGF0b3IucHNhYWlybGluZXMuY29tgih0ZXN0cGxhbm5p
bmd2YWxpZGF0b3JhcGkucHNhYWlybGluZXMuY29tgiF0ZXN0cmVsZWFzZS5waWVk
bW9udC1haXJsaW5lcy5jb22CG3Rlc3RyZWxlYXNlLnBzYWFpcmxpbmVzLmNvbYIg
VGVzdHRva2Vuc2VydmljZS5wc2FhaXJsaW5lcy5jb22CHFRva2Vuc2VydmljZS5w
c2FhaXJsaW5lcy5jb22CGFRva2Vuc3ZjLnBzYWFpcmxpbmVzLmNvbYIQd3d3LmVu
dm95YWlyLmNvbYISd3d3LmVudm95Y2FkZXQuY29tghN3d3cuZW52b3ljYWRldHMu
Y29tghN3d3cuZW52b3lwaWxvdHMuY29tghJ3d3cubXllbnZveWFpci5jb22CGXd3
dy5waWVkbW9udC1haXJsaW5lcy5jb22CE3d3dy5wc2FhaXJsaW5lcy5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYD
VR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNl
cnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5k
aWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4G
A1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJ
BgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQC3cM3BR2ANBZZQuyhteW6ALTJUiKfF5ewx5ndQfjffUL+DwfhuUFdISPo8MKh6
LlYdMZ03WdT7m9m1NI7t2hR2zt4/fDJa4Ck1o0c8wlTWp3MdtT/lEoMbwuKn12p4
l/Gpk+Y63BvYhsoWs4M3n4ek7bE1jDjNNVmFr3U/bJbaINJJ0Al2key9fU5hnwH6
9uT0BgMjIt2QEjZ+xKlVP5/ut5nU7rP286lzg7yJ8OkWjvEdZe8W3iMOTI9ZZx60
mxqSYxVBOBkAWDwEg9BNiW0SuDVhqu8jmHLlS8t82As8Eih4j48QGA4obYP5+l9P
ioZQABpurmWUjieP7DrGbE1Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfiy35YQ1FQ309Hu+Oi+
ZLgTQUXaWz7YnsJkeOqDgJHQSj5mVTETXW+zAza3BoU+5OKVNPduVN/e+h37x7Cu
u0xS8+KJc6+zNkRQNe38Hxh4UXpl5iE+Zro0JM1uyt8hV0zCi81fB+qGFP7ZQA3e
jH493BDJwEhXxtDKhwLDlghSlrrkcdj08KQUG3tIEy82XoOR1wYjx5mhscn3g8Lo
UWaDf7BJnX2ukk1UryMuf45JPXRywknIFYFYiVZNFvXNccqp7tuzQleLgW0kCocK
sMoY89oWWCE/kbk+K5SYgn/PhC2HHtGsN9MHaH72zJ8PqfdezizQ5MS7B0ReTUx3
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4028638046922952437380765414742156841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'release.psaairlines.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24486630770107497933697858884003147274915838919867012996702433147706561262167482581216073446397267013582335282011083168709451341170291187252070769507344127672648301214015138066941926134680497218371586161046359338769508036683204447559235684405791990234977840959062239293091821894433259849605361175250063679851780842317311375710264524652500523308108854440897092610031499564730988603157950727176974673879895123669006044989362535374595743779313030792902596037992806471554251741918431919069355847676004207481567395135255108009995953905387387429530000700808734402589075645154471697145351462189067716995298715592064204830667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f1ee32c8cd38651c44a18a9630361d9dc3c3d5f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1210 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeregionals.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'amp.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aos.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewmobile.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Crewsuite.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dh.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emp.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoypilots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'manuals.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdt.manuals.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myenvoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Notify.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paydocs.envoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paydocs.stage.envoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningvalidator.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'planningvalidatorapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'regionaltraining.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'releaseapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbywebl1.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skytech.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skytech.stage.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Testamp.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testaos.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Testcrewsuite.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Testnotify.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testplanningvalidator.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testplanningvalidatorapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrelease.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrelease.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Testtokenservice.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Tokenservice.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Tokensvc.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envoycadet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envoycadets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.envoypilots.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myenvoyair.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.piedmont-airlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.psaairlines.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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