www.klm.com
- KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V. -
Issued by COMODO RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 89:42:e3:d1:ae:e3:93:aa:c3:49:a5:c0:d4:31:2f:cc was issued on by COMODO CA Limited.
With 28 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.
Organization:
KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.
Organization unit: IS
Organization unit: IS
Address:
Amsterdamseweg 55
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: AMSTELVEEN
Country: NL
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: AMSTELVEEN
Country: NL
COMODO CA Limited
Organization:
COMODO CA Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 89:42:e3:d1:ae:e3:93:aa:c3:49:a5:c0:d4:31:2f:ccSerial Number (int): 182451547734988282829595371000411795404
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 3a:dc:f8:f7:ea:03:5e:29:72:c1:8e:8a:f3:c4:01:87:69:ac:7e:67
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24
Fingerprint (sha1): d2:10:78:9b:a9:82:0e:ce:a9:c5:11:13:42:3c:e2:c0:77:e3:94:a9
Fingerprint (sha256): 21:90:9f:e4:4b:e9:13:59:fe:ae:3a:22:12:08:71:97:57:7b:b5:70:6f:42:34:04:8a:e7:41:29:3d:46:3e:6f
Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.comodoca.comCRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate www.klm.com
28
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.klm.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.klm.com
apps.static-afkl.com
beta.airfrance.fr
beta.klm.nl
core.static-afkl.com
img.static-af.com
img.static-kl.com
klm.com
login.airfrance.com
login.airfrance.fr
login.flyingblue.com
login.klm.com
www.static-af.com
www.static-kl.com
wwws.airfrance.ca
wwws.airfrance.co.id
wwws.airfrance.co.za
wwws.airfrance.com.co
wwws.airfrance.com.hk
wwws.airfrance.cz
wwws.airfrance.fr
wwws.airfrance.ht
wwws.airfrance.nl
wwws.airfrance.no
wwws.airfrance.pe
wwws.klm.fr
wwws.klm.nl
wwws.klm.no
apps.static-afkl.com
beta.airfrance.fr
beta.klm.nl
core.static-afkl.com
img.static-af.com
img.static-kl.com
klm.com
login.airfrance.com
login.airfrance.fr
login.flyingblue.com
login.klm.com
www.static-af.com
www.static-kl.com
wwws.airfrance.ca
wwws.airfrance.co.id
wwws.airfrance.co.za
wwws.airfrance.com.co
wwws.airfrance.com.hk
wwws.airfrance.cz
wwws.airfrance.fr
wwws.airfrance.ht
wwws.airfrance.nl
wwws.airfrance.no
wwws.airfrance.pe
wwws.klm.fr
wwws.klm.nl
wwws.klm.no
Other certificates including the domain name klm.com
(limited to 100 certificates)
vanity-ae.klm.com
gofuel-acc-ute.klm.com
origin.api.ee1.klm.com
nieuws.klm.com
imperva.com
airlines.api.amadeus.com
kiosk.ute2.klm.com
origin.api.klm.com
*.cf.devnet.klm.com
travel-with-kids.klm.com
campaigndesigner.klm.com
www.iseatz.com
campagnes.klm.com
werelddeal.klm.com
ba.ite2.klm.com
flightguide.klm.com
sustainability.klm.com
materials.klm.com
api.ee1.klm.com
origin.api.ae3.klm.com
flightoffers.klm.com
werelddeal.klm.com
china.klm.com
werelddeal.klm.com
flightoffers.klm.com
getaways.klm.com
flexfares.klm.com
evenweg.klm.com
san1.klmonline.com
flexfares.klm.com
payments.klm.com
flyforward.klm.com
www.klm.com
services2.klm.com
aefederation.klm.com
services.ae1.klm.com
fes-dev.klm.com
flightbundle.klm.com
fes.klm.com
houses.klm.com
evenweg.klm.com
china.klm.com
packyourdestination.klm.com
co2.ehn.klm.com
ehn.klm.com
kiosk.klm.com
san1.klmonline.com
san1.klmonline.com
services.ite2.klm.com
md11farewellflight.klm.com
upgradeyourself.klm.com
bb.klm.com
services.ave1.klm.com
ba.ee.klm.com
caretag.klm.com
developer-test.klm.com
www.se2.klm.com
partsofaperfectjourney.klm.com
www.iseatz.com
habile-challenges.klm.com
imperva.com
transactions.klm.com
destinationmatch.klm.com
services.ute2.klm.com
klm.com
evenweg.klm.com
connect.klm.com
cuba.klm.com
campaigndesigner2.klm.com
san1.klmonline.com
san1.klmonline.com
fes-acc.klm.com
werelddeal.klm.com
services.ae2.klm.com
federation.klm.com
escapades.klm.com
klpl03.klm.com
*.ams.cloud.klm.com
campagnes.klm.com
csr.klm.com
www3.ute1.klm.com
blog-origin.klm.com
flightbundle.klm.com
san1.klmonline.com
*.klm.com
daytripper.klm.com
mysteryticket.klm.com
flightbundle.klm.com
ers.klm.com
secure.klm.com
imperva.com
webmail.klm.com
flyforward.klm.com
payments.test.klm.com
digital.publications.klm.com
aend.klm.com
destinationmatch.klm.com
china.klm.com
evenweg.klm.com
mysteryticket.klm.com
gofuel-acc-ute.klm.com
origin.api.ee1.klm.com
nieuws.klm.com
imperva.com
airlines.api.amadeus.com
kiosk.ute2.klm.com
origin.api.klm.com
*.cf.devnet.klm.com
travel-with-kids.klm.com
campaigndesigner.klm.com
www.iseatz.com
campagnes.klm.com
werelddeal.klm.com
ba.ite2.klm.com
flightguide.klm.com
sustainability.klm.com
materials.klm.com
api.ee1.klm.com
origin.api.ae3.klm.com
flightoffers.klm.com
werelddeal.klm.com
china.klm.com
werelddeal.klm.com
flightoffers.klm.com
getaways.klm.com
flexfares.klm.com
evenweg.klm.com
san1.klmonline.com
flexfares.klm.com
payments.klm.com
flyforward.klm.com
www.klm.com
services2.klm.com
aefederation.klm.com
services.ae1.klm.com
fes-dev.klm.com
flightbundle.klm.com
fes.klm.com
houses.klm.com
evenweg.klm.com
china.klm.com
packyourdestination.klm.com
co2.ehn.klm.com
ehn.klm.com
kiosk.klm.com
san1.klmonline.com
san1.klmonline.com
services.ite2.klm.com
md11farewellflight.klm.com
upgradeyourself.klm.com
bb.klm.com
services.ave1.klm.com
ba.ee.klm.com
caretag.klm.com
developer-test.klm.com
www.se2.klm.com
partsofaperfectjourney.klm.com
www.iseatz.com
habile-challenges.klm.com
imperva.com
transactions.klm.com
destinationmatch.klm.com
services.ute2.klm.com
klm.com
evenweg.klm.com
connect.klm.com
cuba.klm.com
campaigndesigner2.klm.com
san1.klmonline.com
san1.klmonline.com
fes-acc.klm.com
werelddeal.klm.com
services.ae2.klm.com
federation.klm.com
escapades.klm.com
klpl03.klm.com
*.ams.cloud.klm.com
campagnes.klm.com
csr.klm.com
www3.ute1.klm.com
blog-origin.klm.com
flightbundle.klm.com
san1.klmonline.com
*.klm.com
daytripper.klm.com
mysteryticket.klm.com
flightbundle.klm.com
ers.klm.com
secure.klm.com
imperva.com
webmail.klm.com
flyforward.klm.com
payments.test.klm.com
digital.publications.klm.com
aend.klm.com
destinationmatch.klm.com
china.klm.com
evenweg.klm.com
mysteryticket.klm.com
Certificate
The complete raw certificate details for www.klm.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHszCCBpugAwIBAgIRAIlC49Gu45Oqw0mlwNQxL8wwDQYJKoZIhvcNAQELBQAw gZYxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO BgNVBAcTB1NhbGZvcmQxGjAYBgNVBAoTEUNPTU9ETyBDQSBMaW1pdGVkMTwwOgYD VQQDEzNDT01PRE8gUlNBIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIFNlY3VyZSBT ZXJ2ZXIgQ0EwHhcNMTcwNzA1MDAwMDAwWhcNMTkwMTI3MjM1OTU5WjCBvjELMAkG A1UEBhMCTkwxEDAOBgNVBBETBzExODIgR1AxFjAUBgNVBAgTDU5vb3JkLUhvbGxh bmQxEzARBgNVBAcTCkFNU1RFTFZFRU4xGjAYBgNVBAkTEUFtc3RlcmRhbXNld2Vn IDU1MTEwLwYDVQQKEyhLT05JTktMSUpLRSBMVUNIVFZBQVJUIE1BQVRTQ0hBUFBJ SiBOLlYuMQswCQYDVQQLEwJJUzEUMBIGA1UEAxMLd3d3LmtsbS5jb20wggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9T3+3NNHD3MoLP2RUdTY3tMzqXRlN XWW2USCbq2MQLvUQaYztJLp2jXsSIrtr9NA2hknx/YFLqABfiDLn186kCahNwpId lAeF1MyqsC1LBU6ONlh462C5504xG7YtbDS8EnKI1DyfwDE3nGpcU/9X1BIBMREF 8f92tUHXbrrDlyr5XT9VGNKqOLVN0GOw825+9Crhq95QSihjpLbNXMEoVX0sKuGG 5tPi772hJq1/mroMpGx6Teu1vNl9dlQL4F4OF498Mp+qKT6JPgBR2xXNCaQWFkH3 YAYwXj+OfV0+b8A0zgZqRFOG/zxkxWXnet/022zwm/Hz21SNmX7Pjij/AgMBAAGj ggPQMIIDzDAfBgNVHSMEGDAWgBSa8yvaz61Pti+7KkhIKhK3G0LBJDAdBgNVHQ4E FgQUOtz49+oDXilywY6K88QBh2msfmcwDgYDVR0PAQH/BAQDAgWgMAwGA1UdEwEB /wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFAGA1UdIARJMEcw OwYMKwYBBAGyMQECAQMEMCswKQYIKwYBBQUHAgEWHWh0dHBzOi8vc2VjdXJlLmNv bW9kby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBLhklodHRwOi8v Y3JsLmNvbW9kb2NhLmNvbS9DT01PRE9SU0FPcmdhbml6YXRpb25WYWxpZGF0aW9u U2VjdXJlU2VydmVyQ0EuY3JsMIGLBggrBgEFBQcBAQR/MH0wVQYIKwYBBQUHMAKG SWh0dHA6Ly9jcnQuY29tb2RvY2EuY29tL0NPTU9ET1JTQU9yZ2FuaXphdGlvblZh bGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmNvbW9kb2NhLmNvbTCCAg8GA1UdEQSCAgYwggICggt3d3cua2xtLmNvbYIU YXBwcy5zdGF0aWMtYWZrbC5jb22CEWJldGEuYWlyZnJhbmNlLmZyggtiZXRhLmts bS5ubIIUY29yZS5zdGF0aWMtYWZrbC5jb22CEWltZy5zdGF0aWMtYWYuY29tghFp bWcuc3RhdGljLWtsLmNvbYIHa2xtLmNvbYITbG9naW4uYWlyZnJhbmNlLmNvbYIS bG9naW4uYWlyZnJhbmNlLmZyghRsb2dpbi5mbHlpbmdibHVlLmNvbYINbG9naW4u a2xtLmNvbYIRd3d3LnN0YXRpYy1hZi5jb22CEXd3dy5zdGF0aWMta2wuY29tghF3 d3dzLmFpcmZyYW5jZS5jYYIUd3d3cy5haXJmcmFuY2UuY28uaWSCFHd3d3MuYWly ZnJhbmNlLmNvLnphghV3d3dzLmFpcmZyYW5jZS5jb20uY2+CFXd3d3MuYWlyZnJh bmNlLmNvbS5oa4IRd3d3cy5haXJmcmFuY2UuY3qCEXd3d3MuYWlyZnJhbmNlLmZy ghF3d3dzLmFpcmZyYW5jZS5odIIRd3d3cy5haXJmcmFuY2UubmyCEXd3d3MuYWly ZnJhbmNlLm5vghF3d3dzLmFpcmZyYW5jZS5wZYILd3d3cy5rbG0uZnKCC3d3d3Mu a2xtLm5sggt3d3dzLmtsbS5ubzANBgkqhkiG9w0BAQsFAAOCAQEAe//VO0j/Wqkh Ur+370xnwnPsSgrmRZ8QI5mIeAlmV4pdECwqE2/LelTtDlLROlHm0tW70f+NV3IN Il/wFvOP4/3Ts13W0EhM9gvaHKNDUYBZygwv5W0mmbwgZ12ZlmvtuhA/bKXcy/VS d7hCajp2CK9QDQon3Duq3yBOKcpl0YeBmK3+NbQVV4u8dG2cwtd9rMVqTGpM2Jnw PfD+zVNr/nZlvk9kR2MMYXe/iUy62xpHilIiqvTGLbtohWfUgNXGip1Rd/1NdB8W pDlUmr8AH+cZuSnmkKKdAtv8HD2viXLmZhKdfaDz6oQQzV4vi+RoKrMKGnro5aSv rkVrCtAMTA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvU9/tzTRw9zKCz9kVHU2 N7TM6l0ZTV1ltlEgm6tjEC71EGmM7SS6do17EiK7a/TQNoZJ8f2BS6gAX4gy59fO pAmoTcKSHZQHhdTMqrAtSwVOjjZYeOtguedOMRu2LWw0vBJyiNQ8n8AxN5xqXFP/ V9QSATERBfH/drVB1266w5cq+V0/VRjSqji1TdBjsPNufvQq4aveUEooY6S2zVzB KFV9LCrhhubT4u+9oSatf5q6DKRsek3rtbzZfXZUC+BeDhePfDKfqik+iT4AUdsV zQmkFhZB92AGMF4/jn1dPm/ANM4GakRThv88ZMVl53rf9Nts8Jvx89tUjZl+z44o /wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 182451547734988282829595371000411795404 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-05 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1182 GP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMSTELVEEN' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdamseweg 55' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klm.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23898242001969640757990932301116202913289213254895881770528704397646023006307782168110238006015012520219560112093934182084337736946558586901454749762254206286675441906496990739187844783193624915058332553330330254635049760724181485012326124019885891075690149442490156177582268166110409758677325098558212436375827934593587941729143075566703807920096310882118369588789833178654434670599477931704991172338825302675959605289283888943919472999769885588527812683831918120657849851984232862641672860951989697780332583097459589916212003734185950449141179838666783669547447543703881229115340281638125084820948340868594407450879 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3adcf8f7ea035e2972c18e8af3c4018769ac7e67 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (518 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.static-afkl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.airfrance.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.klm.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.static-afkl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.static-af.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.static-kl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.airfrance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.airfrance.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.flyingblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.static-af.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.static-kl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.co.id' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.co.za' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.com.co' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.com.hk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.cz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.ht' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.no' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.airfrance.pe' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.klm.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.klm.nl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwws.klm.no' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 007bffd53b48ff5aa92152bfb7ef4c67c273ec4a0ae6459f10239988780966578a5d102c2a136fcb7a54ed0e52d13a51e6d2d5bbd1ff8d57720d225ff016f38fe3fdd3b35dd6d0484cf60bda1ca343518059ca0c2fe56d2699bc20675d99966bedba103f6ca5dccbf55277b8426a3a7608af500d0a27dc3baadf204e29ca65d1878198adfe35b415578bbc746d9cc2d77dacc56a4c6a4cd899f03df0fecd536bfe7665be4f6447630c6177bf894cbadb1a478a5222aaf4c62dbb688567d480d5c68a9d5177fd4d741f16a439549abf001fe719b929e690a29d02dbfc1c3daf8972e666129d7da0f3ea8410cd5e2f8be4682ab30a1a7ae8e5a4afae456b0ad00c4c