premium-mobile.stage.aa.com

- American Airlines Inc -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:d7:be:11:1b:6e:0a:1b:81:50:14:8f:4f:d0:31:95 was issued on by DigiCert Inc.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:d7:be:11:1b:6e:0a:1b:81:50:14:8f:4f:d0:31:95
Serial Number (int): 6437110820917232828002389006073475477
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: dc:9d:3b:00:84:e6:3a:62:23:e8:f8:4a:93:60:51:4e:57:2d:a8:30
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0b:43:6f:ae:13:ca:d3:2f:87:be:c3:e9:19:ca:4f:48:8e:9f:db:30
Fingerprint (sha256): 2b:cb:48:15:33:ec:02:0a:21:11:fc:54:39:14:b6:bc:72:1b:40:4f:84:80:7f:ed:e5:70:c6:9a:fb:03:94:a5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate premium-mobile.stage.aa.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premium-mobile.stage.aa.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aairpass.stage.aa.com
aairpass.test.aa.com
agentassist.nonprod.aa.com
agentassist.test.aa.com
airpass.api.dev.aa.com
airpass.api.qa.aa.com
airpass.api.stage.aa.com
airpass.stage.aa.com
airpass.test.aa.com
airportagent.test.aa.com
akamaitest4.aa.com
apc-dev.aa.com
apc-stage.aa.com
api.np.bags.aa.com
asmdev1.aa.com
asmdev2.aa.com
bagsecurity.app.np.bags.aa.com
cn.nonprod.feature.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.services.aa.com
config.app.np.bags.aa.com
corporateexperienceframework-uat.aa.com
crewcompensation.stage.aa.com
crewcompensation.test.aa.com
crmwebstage.aa.com
ctapmphx.aa.com
customermdm.nonprod.services.aa.com
dev.marketdata.aa.com
developer-nonprod.aa.com
deviate.app.np.bags.aa.com
envoycrew.qcorpaa.aa.com
envoycrewstage.aa.com
falcon.app.np.bags.aa.com
faportal-stage.aa.com
featureflags-api-np.aa.com
featureflags-np.aa.com
flightweb-dev.aa.com
flightweb-stage.aa.com
frd.stage.aa.com
frd.stg.aa.com
globalsales-stg.aa.com
hazraps-dev.aa.com
hazraps-stage.aa.com
health.app.np.bags.aa.com
helix.stage.aa.com
kiko.app.np.bags.aa.com
loyalty-upgrades.stage.aa.com
newme-stage.aa.com
newmelab.qcorpaa.aa.com
nonprod-login.aa.com
nppgadmin.stage.aa.com
nrta.test.aa.com
owrcm-stg.aa.com
pilot-tts-dev.aa.com
pilot-tts-stage-smoke.aa.com
premium-mobile.stage.aa.com
prime.app.np.bags.aa.com
ptts-admin-dev.aa.com
ptts-admin-stage-smoke.aa.com
qa.admin.aa.com
qa.srflightoptions.aa.com
raven-dev.aa.com
resagent.nonprod.aa.com
safeline.mx.stage.aa.com
sg.np.bags.aa.com
stage.admin.aa.com
stage.marketdata.aa.com
stage.srflightoptions.aa.com
svcarddetails.stage.aa.com
svcardissue.stage.aa.com
tac.stage.aa.com
techopshub.me.stage.aa.com
test.marketdata.aa.com
testapi.psaairlines.com
testcrewmobile.psaairlines.com
travelplanner.test.aa.com
viper-dev.aa.com
viper-stage.aa.com
viper-test.aa.com
wiki-nonprod.aa.com
www.aairpass.stage.aa.com
www.aairpass.test.aa.com
www.airpass.stage.aa.com
www.airpass.test.aa.com
www.newme-stage.aa.com
www.newmelab.qcorpaa.aa.com
www.nppgadmin.stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for premium-mobile.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE5sNRNRMH0W+wqNGKLtgvz8gn+u9s
hOie5ZV6mkRLfc95a1jDuNj4fheHkqkiRhmiQK5XCp15CyA+YRQAe7VEGA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6437110820917232828002389006073475477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premium-mobile.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e6c351351307d16fb0a8d18a2ed82fcfc827faef6c84e89ee5957a9a444b7dcf796b58c3b8d8f87e178792a9224619a240ae570a9d790b203e6114007bb54418
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc9d3b0084e63a6223e8f84a9360514e572da830
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest4.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev2.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsecurity.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.feature.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.platform.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateexperienceframework-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crmwebstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctapmphx.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermdm.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviate.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrewstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcon.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-api-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsales-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helix.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiko.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-upgrades.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-login.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrta.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owrcm-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-mobile.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raven-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeline.mx.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcarddetails.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcardissue.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tac.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techopshub.me.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcrewmobile.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001771bccae5c0000040300473045022100beac49d5cc9e6f83bcd4fa1763bead463dfaa1be14d2190b2f11964a429c9a6c022019ac218dd4cd9c951cb625b8aed7a4cf3db7b1da39dbd61ab9bee6d1e65c5e1d0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001771bccaee00000040300473045022100bf61dc7a3dee77bcafaf44fce56eda90b80aed33089c4ecd27b37623c1126d3d022076bba0a308f124b0ef39afc200de96c20d720161586d7a48a79b0f354ee29cb6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006c0d5c155233e617e8e5757694a5ccf772b60b902453d3f997bd200335353cd2730d6ec6f1d666e69533eb2740ab94a7f47b1592f6709fcedd67d5358b8da289a1eb8ff6ae9881edc3137591758b24addb2baa57ed245d22b3ad26c164ae2abb20758578ae60fd7ba393277a0495ec9e6464cd263fd6a96c27aa5d28bf7e3c016f5c29dd6b3a53799b4311499f2b9fe6e47a282b42df39d1708279f4808c780e177c4664297e998159ec68ff25b231955499bcb6ef7c22ac692775a18eff26c4ee62deb593819a19df6fc09ed9c00362600ec00b03a58063d8259379ba7f93b295720575a529eacf552697958796781ca4c9cba020403ceb1a22b3de4140c900