premium-mobile.stage.aa.com

- American Airlines Inc -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:fe:9d:c4:bb:82:e5:35:f8:54:e5:6a:b9:79:61:3f was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American Airlines Inc

Organization: American Airlines Inc
State / Province: Texas
Locality: Fort Worth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:fe:9d:c4:bb:82:e5:35:f8:54:e5:6a:b9:79:61:3f
Serial Number (int): 13285095289191654792485359828808065343
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 62:7d:aa:cf:7f:66:b0:01:d6:0b:b2:2c:3a:ea:44:9e:ce:c9:10:2e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 87:d2:9b:d0:6b:c6:82:aa:ac:58:18:a5:3a:fc:72:71:b9:3e:05:6b
Fingerprint (sha256): 2c:f0:0f:d1:92:35:ba:eb:b4:69:cf:be:d4:1a:83:df:8a:9b:d2:b5:55:54:5f:22:48:12:e2:7f:3a:08:30:8d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate premium-mobile.stage.aa.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for premium-mobile.stage.aa.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

premium-mobile.stage.aa.com
aairpass.stage.aa.com
aairpass.test.aa.com
achievements-dev.aa.com
agentassist.nonprod.aa.com
agentassist.test.aa.com
airpass.api.dev.aa.com
airpass.api.qa.aa.com
airpass.api.stage.aa.com
airpass.stage.aa.com
airpass.test.aa.com
airportagent.test.aa.com
akamaitest4.aa.com
apc-dev.aa.com
apc-stage.aa.com
api.np.bags.aa.com
asmdev1.aa.com
asmdev2.aa.com
bagsecurity.app.np.bags.aa.com
cabin.nonprod.aa.com
cn.nonprod.feature.aa.com
cn.nonprod.platform.aa.com
cn.nonprod.services.aa.com
compensation.stage.aa.com
compensation.test.aa.com
config.app.np.bags.aa.com
corporateexperienceframework-uat.aa.com
crewcompensation.stage.aa.com
crewcompensation.test.aa.com
ctapmphx.aa.com
customermdm.nonprod.services.aa.com
dev.base.aa.com
dev.marketdata.aa.com
developer-nonprod.aa.com
deviate.app.np.bags.aa.com
envoycrew.qcorpaa.aa.com
envoycrewstage.aa.com
falcon.app.np.bags.aa.com
faportal-stage.aa.com
fdgd-dev-apigateway.aa.com
fdgd-stage-apigateway.aa.com
fdgd-test-apigateway.aa.com
featureflags-api-np.aa.com
featureflags-np.aa.com
flightweb-dev.aa.com
flightweb-stage.aa.com
frd.stage.aa.com
frd.stg.aa.com
globalsales-stg.aa.com
hazraps-dev.aa.com
hazraps-stage.aa.com
health.app.np.bags.aa.com
kiko.app.np.bags.aa.com
kronosadmin-stage.aa.com
loyalty-upgrades.stage.aa.com
mctapp-stage.aa.com
merch-dev.aa.com
merch-stg.aa.com
newme-stage.aa.com
newmelab.qcorpaa.aa.com
nonprod-login.aa.com
nppgadmin.stage.aa.com
nrta.test.aa.com
owrcm-stg.aa.com
pilot-tts-dev.aa.com
pilot-tts-stage-smoke.aa.com
pilot-tts-uat.aa.com
prime.app.np.bags.aa.com
ptts-admin-dev.aa.com
ptts-admin-stage-smoke.aa.com
ptts-admin-uat.aa.com
qa.admin.aa.com
qa.srflightoptions.aa.com
raven-dev.aa.com
resagent.nonprod.aa.com
safeline.mx.stage.aa.com
sg.np.bags.aa.com
stage.admin.aa.com
stage.base.aa.com
stage.marketdata.aa.com
stage.srflightoptions.aa.com
svcarddetails.stage.aa.com
svcardissue.stage.aa.com
tac.stage.aa.com
techopshub.me.stage.aa.com
test.marketdata.aa.com
testapi.psaairlines.com
testcrewmobile.psaairlines.com
travelplanner.test.aa.com
viper-dev.aa.com
viper-stage.aa.com
viper-test.aa.com
wiki-nonprod.aa.com
www.aairpass.stage.aa.com
www.aairpass.test.aa.com
www.airpass.stage.aa.com
www.airpass.test.aa.com
www.newme-stage.aa.com
www.newmelab.qcorpaa.aa.com
www.nppgadmin.stage.aa.com

Other certificates including the domain name aa.com

(limited to 100 certificates)
psastage.aa.com
bc-stage.aa.com
boss-cdc.stage.aa.com
dtr.phx.aa.com
fos.aa.com
custhubmdm-grp1.tul.aa.com
mdmds.test.aa.com
aspectwfm.cdc.aa.com
nrsqa.test.qcorpaa.aa.com
mfa.aa.com
admin.aa.com
aemes.envoy.aa.com
loyaltypartnercitibenefit.stage.aa.com
pilotpbs-sb.aa.com
pilot-tts.aa.com
techopsk2.uat.corpaa.aa.com
smetrics.aa.com
americanwaymagazine.com
c3008011sme001-ms.corpaa.aa.com
stage.aa.com
cass.qcorpaa.aa.com
Aircraft.mx.techops.stage.aa.com
apps.usairways.com
wb.etm.aa.com
yada-beta.stage.aa.com
wifi-cc-stg.zeaus.aa.com
fb-pdc.aa.com
mclastage.aa.com
aagrc.aa.com
cka.aa.com
*.apps.cpepaas.aa.com
owrcm.aa.com
airportal-pdc.aa.com
handpunch.aa.com
fapbsbvr-ws.aa.com
get.azpw.aa.com
itas.aa.com
admin.awarenessnetworks.com
tmscsurvey-test.aa.com
release.psaairlines.com
aacloud.qa.esoa.qcorpaa.aa.com
pilots.aa.com
mercury.aa.com
aaapac-expcluster-e01-hon1.aa.com
cass-stage.aa.com
checkfree-stage.aa.com
americaneagle.aa.com
spe-nonprod.aa.com
aotsceptrexlrp3.corpaa.aa.com
bw-a.pdc.aa.com
racf.stage.aa.com
lmo.me.aa.com
ifs.aa.com
vpsx.azure.qa.techops.aa.com
salt-np.aa.com
scdfwappp1000001.corpaa.aa.com
aacs.stage.esoa.aa.com
pssi.stage.esoa.aa.com
aapilots.com
qa-cdn.flyaa.aa.com
retirees-stg-cdc.aa.com
aana-expcluster-e01-bv1.aa.com
cbjocaz.aa.com
newemployeetravel.test.aa.com
diversions-stg.lka.aa.com
res-keystar.stage.aa.com
jamfpro.aa.com
aasales.dev.esoa.qcorpaa.aa.com
aiops.aa.com
ssofedpdc.aa.com
aepp.jetnet.aa.com
airport360.aa.com
esdfwovp0000001.DFWD1.aa.com
app.aa.com
wb.etm.aa.com
smlogin.qtcorpaa.aa.com
eworkforce.aa.com
Aircraft-cdc.mx.techops.aa.com
uagzeusn.aa.com
ecmappservices-dr.aa.com
facet9.aa.com
premium.stage.aa.com
mercury-cert.aa.com
yada-beta.stage.aa.com
etqstage.aa.com
*.cloud-np.aa.com
webref.stage.aa.com
pilots.aa.com
ox-d.aa.com
isolve.aa.com
ltuappp04.corpaa.aa.com
www.aa.com
elite-qa.aa.com
ecmcsservices-stg-acs1.aa.com
yada.aa.com
lmo.stage.me.aa.com
crewwatch-stg.ido.horizon.cherokee.aa.com
mopsmanager.qcorpaa.aa.com
cciweb-stg.aa.com
concourse.ci.qcorpaa.aa.com

Certificate

The complete raw certificate details for premium-mobile.stage.aa.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEudZspaQ3R2Ylg/pvNAksSLfOw3QC
00+41FFRqoDtVemOzWtrRQf2w3sJQV57ZQBn+on2X8p6KnHk/FIEoGUeRw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13285095289191654792485359828808065343
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Fort Worth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American Airlines Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'premium-mobile.stage.aa.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b9d66ca5a43747662583fa6f34092c48b7cec37402d34fb8d45151aa80ed55e98ecd6b6b4507f6c37b09415e7b650067fa89f65fca7a2a71e4fc5204a0651e47
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							627daacf7f66b001d60bb22c3aea449ecec9102e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2422 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premium-mobile.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'achievements-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agentassist.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.qa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.api.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airportagent.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamaitest4.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev1.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asmdev2.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bagsecurity.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cabin.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.feature.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.platform.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cn.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporateexperienceframework-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crewcompensation.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ctapmphx.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customermdm.nonprod.services.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'developer-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deviate.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrew.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'envoycrewstage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'falcon.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faportal-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-dev-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-stage-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fdgd-test-apigateway.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-api-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'featureflags-np.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flightweb-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frd.stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalsales-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hazraps-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'health.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiko.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kronosadmin-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loyalty-upgrades.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mctapp-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'merch-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nonprod-login.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrta.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owrcm-stg.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot-tts-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prime.app.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-stage-smoke.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptts-admin-uat.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'raven-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resagent.nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safeline.mx.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg.np.bags.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.admin.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.base.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.srflightoptions.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcarddetails.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svcardissue.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tac.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'techopshub.me.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.marketdata.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testapi.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcrewmobile.psaairlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'travelplanner.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-dev.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viper-test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wiki-nonprod.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aairpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.airpass.test.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newme-stage.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.newmelab.qcorpaa.aa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nppgadmin.stage.aa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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