premium-mobile.stage.aa.com

- American Airlines Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:ec:a5:97:1e:d7:bb:11:7e:c5:66:f5:6a:18:2c:c3 was issued on by DigiCert Inc.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ec:a5:97:1e:d7:bb:11:7e:c5:66:f5:6a:18:2c:c3
Serial Number (int): 6545652612336377742602617130862521539
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 87:8a:e0:1e:22:29:c6:be:d9:59:fc:66:1f:37:62:2a:2a:d3:7d:0c
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 27:89:c3:20:bb:fa:af:6b:46:64:52:34:7b:ed:f8:13:81:51:88:14
Fingerprint (sha256): 24:c9:79:ee:5c:6f:5f:90:40:d9:d8:02:b6:12:db:b5:8c:be:82:83:24:a2:27:17:eb:ab:74:a1:49:ba:96:e3

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate premium-mobile.stage.aa.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premium-mobile.stage.aa.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nppgadmin.stage.aa.com
www.newmelab.qcorpaa.aa.com
www.newme-stage.aa.com
www.airpass.test.aa.com
www.airpass.stage.aa.com
www.aairpass.test.aa.com
www.aairpass.stage.aa.com
wiki-nonprod.aa.com
viper-test.aa.com
viper-stage.aa.com
viper-dev.aa.com
travelplanner.test.aa.com
testcrewmobile.psaairlines.com
testapi.psaairlines.com
test.marketdata.aa.com
techopshub.me.stage.aa.com
tac.stage.aa.com
svcardissue.stage.aa.com
svcarddetails.stage.aa.com
stage.srflightoptions.aa.com
stage.marketdata.aa.com
stage.base.aa.com
stage.admin.aa.com
sg.np.bags.aa.com
safeline.mx.stage.aa.com
resagent.nonprod.aa.com
raven-dev.aa.com
qa.srflightoptions.aa.com
qa.admin.aa.com
ptts-admin-uat.aa.com
ptts-admin-stage-smoke.aa.com
ptts-admin-dev.aa.com
prime.app.np.bags.aa.com
premium-mobile.stage.aa.com
pilot-tts-uat.aa.com
pilot-tts-stage-smoke.aa.com
pilot-tts-dev.aa.com
owrcm-stg.aa.com
nrta.test.aa.com
nppgadmin.stage.aa.com
nonprod-login.aa.com
newmelab.qcorpaa.aa.com
newme-stage.aa.com
merch-dev.aa.com
mctapp-stage.aa.com
loyalty-upgrades.stage.aa.com
kronosadmin-stage.aa.com
kiko.app.np.bags.aa.com
helix.stage.aa.com
health.app.np.bags.aa.com
hazraps-stage.aa.com
hazraps-dev.aa.com
globalsales-stg.aa.com
frd.stg.aa.com
frd.stage.aa.com
flightweb-stage.aa.com
flightweb-dev.aa.com
featureflags-np.aa.com
featureflags-api-np.aa.com
faportal-stage.aa.com
falcon.app.np.bags.aa.com
envoycrewstage.aa.com
envoycrew.qcorpaa.aa.com
deviate.app.np.bags.aa.com
developer-nonprod.aa.com
dev.marketdata.aa.com
dev.base.aa.com
customermdm.nonprod.services.aa.com
ctapmphx.aa.com
crmwebstage.aa.com
crewcompensation.test.aa.com
crewcompensation.stage.aa.com
corporateexperienceframework-uat.aa.com
config.app.np.bags.aa.com
compensation.test.aa.com
compensation.stage.aa.com
cn.nonprod.services.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.feature.aa.com
cabin.nonprod.aa.com
bagsecurity.app.np.bags.aa.com
asmdev2.aa.com
asmdev1.aa.com
api.np.bags.aa.com
apc-stage.aa.com
apc-dev.aa.com
akamaitest4.aa.com
airportagent.test.aa.com
airpass.test.aa.com
airpass.stage.aa.com
airpass.api.stage.aa.com
airpass.api.qa.aa.com
airpass.api.dev.aa.com
agentassist.test.aa.com
agentassist.nonprod.aa.com
aairpass.test.aa.com
aairpass.stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for premium-mobile.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6non3pZ/hhrUk2nB0l5
fb8BIpBRJqazZdfkYCZwf8Fd53V9YNiN3q/uczkodQ/D+ubOkHHdQnU5KszCrKzG
PnGPTS7PLD7HrT1IY0iCplfWLeDHLt2hsH5L4g5CCnisJ0vD109jH8ts4ZX3WO9g
SvFon72WRUWMnQTG95WCP6eNaZ6HDV82KzIOFg1QMWjl+sdtUSEM4hSctJqVrUS1
VFab2zGFGxDXUoojI+8qzaumK6MPfolbLjvcz//jxlL4GsGjk41Rw0Oj6OiNwt7p
3bJlckZ9kqXdyE4nYvnsgXC3ICYhWaT2Ryhxz5RMp0Ay0/SjeavFBQVx/OwIb1wf
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6545652612336377742602617130862521539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premium-mobile.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24195301343034786838772636960769771989435800812971908071745814203256174299975973479786848554063151689531612862451396206863133428471850362236399263531850609865874526090210159048416127217177947811300520358478358083975109934689660329362187385556339867497673519059477496500491760350574446451010625772615660792874607208821106725667219275539016876231708389247512290763206739281168615534845075874971075614416343484251487504703265949730254286851376240231289383059733881147854520780396211010982026110621237903695850814815689674960185047671154550845117509502458487958588618108143261105901047677603113072086110924183500534587279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							878ae01e2229c6bed959fc661f37622a2ad37d0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2332 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcrewmobile.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techopshub.me.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tac.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcardissue.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcarddetails.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeline.mx.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raven-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-mobile.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owrcm-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrta.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-login.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctapp-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-upgrades.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronosadmin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiko.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsales-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-api-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcon.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrewstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviate.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermdm.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctapmphx.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmwebstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateexperienceframework-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.platform.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.feature.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabin.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsecurity.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev2.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest4.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0049aee050d37cb09d327a7ef5f3fc2be638693425939635da69f05b426b13612ce4b2d2fb275b38fc2f021c6d3df1d38dd2e90ccad922bfd18e9a1e1ca83164771552d0f586698f33bd3f5a836f7db6d8fa535d64f995e264d6c493685bbf18708cb7819092f74804416b20bfd1c5cc283838d350b0e78ecfbcf77fb80787dcb5a4dd5ba6b89c8576b1d49229697379a4b242c41cab07e1231387763e142b612b98dd10a8695755986583a6117a8b9e0e78fa02c94c3c61368fbf14c35d7f6ec716e496d7c2cd0cab04a5bbc40758c2f7d753c24986ba105267485f594ee17ba2825860a982c28be3859306a55a1e9f0cb1af2b00d82fa75da9bc17040a40a92b