points-storefront.flyingblue.com

- SOCIETE AIR FRANCE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 43:df:b1:98:af:1e:77:c1:c5:57:bf:59:62:10:fe was issued on by Sectigo Limited.

With 39 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SOCIETE AIR FRANCE

Organization: SOCIETE AIR FRANCE
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 43:df:b1:98:af:1e:77:c1:c5:57:bf:59:62:10:fe
Serial Number (int): 352420937501640189800541659989151998
Serial Number lenght: 119 bits, 15 octets

SubjectKeyId: 84:6f:40:69:b2:17:35:fc:6b:89:db:6a:c0:ce:6d:d4:ee:a9:9d:0c
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 78:5d:06:47:f3:be:0e:f7:7e:d2:f1:70:01:2d:01:f8:65:b0:b5:cb
Fingerprint (sha256): 29:40:f1:4e:6c:43:90:4e:b5:71:9d:db:41:25:04:08:95:87:4d:c7:00:37:92:b7:cd:94:01:20:5b:26:3a:37

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate points-storefront.flyingblue.com

39

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for points-storefront.flyingblue.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

points-storefront.flyingblue.com
points-storefront.flyingblue.co.ao
points-storefront.flyingblue.co.bw
points-storefront.flyingblue.co.cr
points-storefront.flyingblue.co.il
points-storefront.flyingblue.co.in
points-storefront.flyingblue.co.ke
points-storefront.flyingblue.co.kr
points-storefront.flyingblue.co.nz
points-storefront.flyingblue.co.th
points-storefront.flyingblue.co.ug
points-storefront.flyingblue.co.uk
points-storefront.flyingblue.co.za
points-storefront.flyingblue.com.ar
points-storefront.flyingblue.com.au
points-storefront.flyingblue.com.bo
points-storefront.flyingblue.com.co
points-storefront.flyingblue.com.ec
points-storefront.flyingblue.com.eg
points-storefront.flyingblue.com.gt
points-storefront.flyingblue.com.hk
points-storefront.flyingblue.com.hn
points-storefront.flyingblue.com.mt
points-storefront.flyingblue.com.mx
points-storefront.flyingblue.com.my
points-storefront.flyingblue.com.na
points-storefront.flyingblue.com.ng
points-storefront.flyingblue.com.pa
points-storefront.flyingblue.com.pe
points-storefront.flyingblue.com.ph
points-storefront.flyingblue.com.pk
points-storefront.flyingblue.com.sg
points-storefront.flyingblue.com.sv
points-storefront.flyingblue.com.tr
points-storefront.flyingblue.com.tw
points-storefront.flyingblue.com.ua
points-storefront.flyingblue.com.uy
points-storefront.flyingblue.com.ve
points-storefront.flyingblue.com.vn

Other certificates including the domain name flyingblue.com

(limited to 100 certificates)
events-uat.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
explorefurther.flyingblue.com
link-shopformiles.flyingblue.com
san1.klmonline.com
www.klm.com
earnonline.flyingblue.com
www.flyingblue.com
shopformiles.flyingblue.com
events-uat.flyingblue.com
static-shopandmiles.flyingblue.com
san-17-s51.tlsprovisioning.exacttarget.com
san-8-s10.tlsprovisioning.exacttarget.com
guide.flyingblue.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
klm.com
guide.flyingblue.com
san1.klmonline.com
shopformiles.flyingblue.com
san1.klmonline.com
guide.flyingblue.com
san1.klmonline.com
events.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
flyingblue.com
ui.uat.lifestylesolutionsteam.com
shopformiles.flyingblue.com
mcprod.reward4d.com
mcprod.reward4d.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
san1.klmonline.com
*.rewardsmap.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
www.ghisatest2.prod.lifestylesolutionsteam.com
events.flyingblue.com
events.flyingblue.com
events-uat.flyingblue.com
events-uat.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
shapedbytravel.flyingblue.com
www.klm.com
shopandmiles.flyingblue.com
brix.flyingblue.com
*.rewardsmap.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
mcprod.reward4d.com
static-shopandmiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
static-shopandmiles.flyingblue.com
events.flyingblue.com
shopformiles.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
mcprod.reward4d.com
brix.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
points-storefront.flyingblue.com
static-shopandmiles.flyingblue.com
points-storefront.flyingblue.com
levelcheck.flyingblue.com
www.flyingblue.us
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
events.flyingblue.com
cloud.shoponline.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
earnonline.flyingblue.com
ui.uat.lifestylesolutionsteam.com
san-8-s10.tlsprovisioning.exacttarget.com
shopformiles.flyingblue.com
mcprod.reward4d.com
san-8-s10.tlsprovisioning.exacttarget.com
mcprod.reward4d.com
airfrance.com
www.flyingblue.com
shopformiles.flyingblue.com
san1.klmonline.com
mcprod.reward4d.com
shopformiles.flyingblue.com
www.klm.com
cdn-test.klm.com
www.flyingblue.com
static-shopandmiles.flyingblue.com
*.rewardsmap.flyingblue.com
san-8-s10.tlsprovisioning.exacttarget.com
click.shoponline.flyingblue.com
link-shopformiles.flyingblue.com
hotelsformiles.flyingblue.com
shopandmiles.flyingblue.com
beta.flyingblue.com
klm.com
events.flyingblue.com
events.flyingblue.com
www.flyingblue.us

Certificate

The complete raw certificate details for points-storefront.flyingblue.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJfYZE2tZ0t70GijNIEv
5hJkwuXk28biM+6V9mEsNqnPTRT6GyThrewonBVOXt0q6a5MJKQAeqjSSzG40kva
F2/YKy21R654kftZZQO9CiZw3MA4Ms3TXdEJQFRXqa66SYWB3RnTr9Y8yODJm48l
tJCKvT5atoaFftrUuJM55fFvaxakb0UcBNiozuMT1qH9t8jSBk66ki6G8I6eYcFT
x/UoX3feY0JtQhl1QlpF1LSbM7zMjqC/HxJwgfdKCGIoLQmbZEIUdpj3ezFpyN6h
hmegp9sC062dQK1NrcfNegwwjn+bVBYZKd0z2PKHQ6kDbjUGuaOEA5GX14Qj1rS8
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 352420937501640189800541659989151998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE AIR FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'points-storefront.flyingblue.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20273006493118330153578784626765584487255207220072966885473012441982410715550383974198870249057808474100343058299908971022854697663005811793488602074883798120998560937894221672465591517686770384584427177533895920949043478480224090475989848050459397943280992195988282636616593733548708528745507413223481169676931310447196378968570354962756347930329420225287917028302223279981675898050401511910908698291546247210982426766623627038163688427341654756866234717613963464322551612782949254536988024761105486288603804468825225213198151540208364245449449688356683930905401784904062995750361220638737679273413204328546284387373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							846f4069b21735fc6b89db6ac0ce6dd4eea99d0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018d0cad7d6b00000403004730450221008b2ec05e6288b28bc6ccec511c1e40385757d8ee940da5556f647f01985be52f02201a9798eb503a59be06abdd80a9a87a3f4ab2cbcc059866081694ca1fae9bbbef007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018d0cad7d3e00000403004730450221009ce91110a197500eb6a62f59151c8e3df098c74bf372a1ff62ca6709fb21985302201fb66e205490639afa274683b03d5463d48e6b93edabc8000d6a2c02d17b83b70075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d0cad7d4500000403004630440220456cfad9f6fe014258439d458e78a1c9c149e921cc38ed14dbda5d2769ae7fad0220509489b93b105a876688ebc7b316c9bb0e108898a9926aab52fc965fefe28dac
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1432 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.ug'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.na'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ng'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.com.vn'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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