yada-beta.stage.aa.com

- American Airlines Inc -

Issued by DigiCert TLS Hybrid ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 0e:3d:dd:eb:ab:33:ce:05:aa:09:10:c3:d0:d2:b3:48 was issued on by DigiCert Inc.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:3d:dd:eb:ab:33:ce:05:aa:09:10:c3:d0:d2:b3:48
Serial Number (int): 18930423133484609385508572995125424968
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1e:8d:10:80:a0:6c:8a:04:ba:26:dd:ed:67:9e:a1:77:81:55:ab:6e
AuthorityKeyId: 0a:bc:08:29:17:8c:a5:39:6d:7a:0e:ce:33:c7:2e:b3:ed:fb:c3:7a

Fingerprint (sha1): 65:c8:0d:9e:21:ac:52:c1:11:b4:1c:26:da:db:2d:d9:26:7b:5b:22
Fingerprint (sha256): 28:b9:51:e6:e0:33:ae:15:91:6d:65:9c:b8:2d:2a:0a:95:c5:72:ff:44:00:5c:6d:0d:a5:05:d0:b4:09:b4:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crl

Check the revocation status for certificate yada-beta.stage.aa.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for yada-beta.stage.aa.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aaira-dev.fs.qcorpaa.aa.com
aaira-stage.fs.aa.com
aaira-test.fs.qcorpaa.aa.com
admin.businessextra.stage.aa.com
airpass.stage.aa.com
airportagent.nonprod.aa.com
airportal.nonprod.aa.com
akamaitest30.aa.com
asguard-np.aa.com
businessextra.stage.aa.com
cci-stg.aa.com
cci-tst.qcorpaa.aa.com
charters.stage.aa.com
checkin-qa.aa.com
checkin-stage.aa.com
crewcheckin-stg.aa.com
csmstage.aa.com
dashboard-service-stage.raptor.aa.com
dashboard-service-test.raptor.aa.com
dev.squad360.aa.com
dss-gids-api-nonprod.aa.com
dss-gids-api-uat.aa.com
dss-gids-nonprod.aa.com
dss-gids-uat.aa.com
elite-stage.aa.com
epays.stage.aa.com
facebook-stage.snap.aa.com
facebook-test.snap.aa.com
fapbs-stg.aa.com
faportal-test.qcorpaa.aa.com
faportal-trng.aa.com
fsa-api-dev.aa.com
fsa-api-test.aa.com
fsa-api-uat.aa.com
fsa-dev.aa.com
fsa-test.aa.com
fsa-uat.aa.com
get.azd.aa.com
graph-np.aa.com
innersource-dev.aa.com
innovations.stage.aa.com
isolve.stage.aa.com
isolve.test.aa.com
mctschedule-stg.aa.com
mctsearch-stg.aa.com
mpays.stage.aa.com
my.stage.aa.com
npcharters.stage.aa.com
pdb-dev.aa.com
pilot-tts-stage.aa.com
pilot-tts-test.aa.com
pilotvms-dev.qcorpaa.aa.com
pltapim-dev.aa.com
ptts-admin-stage.aa.com
ptts-admin-test.aa.com
pubs-stage.aa.com
qa.checkout.aa.com
qa.reaccom.aa.com
qadfs.aa.com
qavenmq.oci.aa.com
resagent-dev.aa.com
resagent-qa.aa.com
resagent-stage.aa.com
rfdb-stg.aa.com
rlplus-cdc-stage.aa.com
rlplus-pdc-stage.aa.com
secureauthentication-stage.snap.aa.com
secureauthentication-test.snap.aa.com
setool-dev.aa.com
setool-stage.aa.com
setool-test.aa.com
setoolapi-dev.aa.com
setoolapi-test.aa.com
snapui-stage.snap.aa.com
snapui-test.snap.aa.com
sscmteste.aa.com
stage.biddinghub.aa.com
stage.checkout.aa.com
stage.raptor.aa.com
stage.reaccom.aa.com
stage.squad360.aa.com
test.biddinghub.aa.com
test.raptor.aa.com
testaos.psaairlines.com
testrelease.psaairlines.com
testreleaseapi.psaairlines.com
travelplanner.apps.depaas.qcorpaa.aa.com
travelplanner.apps.qcorpaa.aa.com
travelplanner.apps.sepaas.aa.com
twitter-stage.snap.aa.com
twitter-test.snap.aa.com
ublcrewscheduling-dev-eastus-4dec.aa.com
ublcrewscheduling-dev-eastus-tdec.aa.com
ublcrewscheduling-test.aa.com
ublcrewscheduling-uat.aa.com
web.dss.nonprod.aa.com
www.airpass.stage.aa.com
www.elite-stage.aa.com
yada-beta.stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for yada-beta.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmcpKwbGHYX6+LXg+Suq8f9eB2for
BzNjWo3mKwjySmBk+QorEWDk9KD5d4ZtBr5O9xYU4J+0rXjLK7sVNA84Ng==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18930423133484609385508572995125424968
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS Hybrid ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'yada-beta.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000499ca4ac1b187617ebe2d783e4aeabc7fd781d9fa2b0733635a8de62b08f24a6064f90a2b1160e4f4a0f977866d06be4ef71614e09fb4ad78cb2bbb15340f3836
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0abc0829178ca5396d7a0ece33c72eb3edfbc37a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e8d1080a06c8a04ba26dded679ea1778155ab6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2403 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-dev.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-stage.fs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aaira-test.fs.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportal.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest30.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asguard-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'businessextra.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cci-tst.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'charters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcheckin-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csmstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard-service-test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dss-gids-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fapbs-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-test.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-trng.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-api-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fsa-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'get.azd.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graph-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innersource-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovations.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isolve.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctschedule-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctsearch-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpays.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'npcharters.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pdb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotvms-dev.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pltapim-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pubs-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qadfs.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qavenmq.oci.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfdb-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-cdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlplus-pdc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secureauthentication-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setool-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'setoolapi-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'snapui-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sscmteste.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.checkout.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.reaccom.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.squad360.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.biddinghub.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.raptor.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testaos.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testrelease.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testreleaseapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.depaas.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.apps.sepaas.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-stage.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twitter-test.snap.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-4dec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-dev-eastus-tdec.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ublcrewscheduling-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web.dss.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elite-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yada-beta.stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 9504073335853470869318362430290470625570958463554119487247247420040501126604366480206407507097365423435614097589005
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 7098979231559548353798833786768420239076700281153596906553477061899898429620952045267649420716454986464267334522920