airfrance.com
- Koninklijke Luchtvaart Maatschappij N.V. -
Issued by Sectigo RSA Organization Validation Secure Server CA
About this certificate
This digital certificate with serial number 21:64:a1:0e:2c:5d:2f:03:b4:3b:9a:bc:c8:26:6a:39 was issued on by Sectigo Limited.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Koninklijke Luchtvaart Maatschappij N.V.
Organization:
Koninklijke Luchtvaart Maatschappij N.V.
State / Province:
Noord-Holland
Country: NL
Country: NL
Sectigo Limited
Organization:
Sectigo Limited
State / Province:
Greater Manchester
Locality: Salford
Country: GB
Locality: Salford
Country: GB
This certificate has expire since
Certificate Details
Serial Number (hex): 21:64:a1:0e:2c:5d:2f:03:b4:3b:9a:bc:c8:26:6a:39Serial Number (int): 44387020137626162240233079156892920377
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: b7:b5:c4:21:05:8e:a8:28:17:09:a8:91:b8:85:f6:0d:e2:37:03:c2
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb
Fingerprint (sha1): 07:9f:f2:38:cd:fa:27:7a:7a:24:29:cd:6b:a4:5a:dd:a4:6a:8a:e4
Fingerprint (sha256): 35:05:07:1f:be:b7:f5:51:4e:a6:9e:67:39:c7:73:39:b6:18:1b:ca:1b:8b:37:b5:c5:02:db:d6:ec:fb:bf:aa
Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt
Revocation information
OCSP Server: http://ocsp.sectigo.comCRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl
Check the revocation status for certificate airfrance.com
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for airfrance.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
airfrance.com
*.af-klm.com
*.airfrance.com
*.airfranceklm.com
*.bluebiz.com
*.flyingblue.com
*.klm.com
af-klm.com
airfranceklm.com
bluebiz.com
flyingblue.com
klm.com
*.af-klm.com
*.airfrance.com
*.airfranceklm.com
*.bluebiz.com
*.flyingblue.com
*.klm.com
af-klm.com
airfranceklm.com
bluebiz.com
flyingblue.com
klm.com
Other certificates including the domain name airfrance.com
(limited to 100 certificates)
frenchtech.airfrance.com
www.quantil.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
games.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
*.quantil.com
fondation.airfrance.com
www.quantil.com
projet-fondation.airfrance.com
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.klm.com
support9.cdnetworks.net
crescendo.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
connect.airfrance.com
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
www.atanar.net
staging-assets-lapremiere.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
partenariats.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
pub-ae.airfrance.com
support9.cdnetworks.net
www.quantil.com
support9.cdnetworks.net
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
www.iseatz.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
cardpayment-rct.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
klm.com
support9.cdnetworks.net
support9.cdnetworks.net
doityourself.airfrance.com
support9.cdnetworks.net
cuba.klm.com
support9.cdnetworks.net
*.connect.airfrance.com
www.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
*.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorezlemonde.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorecostarica.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
shopping.airfrance.com
objects.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
dallas.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
frenchtech.airfrance.com
support9.cdnetworks.net
www.quantil.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
games.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
*.quantil.com
fondation.airfrance.com
www.quantil.com
projet-fondation.airfrance.com
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
www.klm.com
support9.cdnetworks.net
crescendo.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
tk.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
connect.airfrance.com
www.atanar.net
support9.cdnetworks.net
support9.cdnetworks.net
www.atanar.net
staging-assets-lapremiere.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
partenariats.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
pub-ae.airfrance.com
support9.cdnetworks.net
www.quantil.com
support9.cdnetworks.net
shopping.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
www.iseatz.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
cardpayment-rct.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
klm.com
support9.cdnetworks.net
support9.cdnetworks.net
doityourself.airfrance.com
support9.cdnetworks.net
cuba.klm.com
support9.cdnetworks.net
*.connect.airfrance.com
www.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
*.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorezlemonde.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
explorecostarica.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
shopping.airfrance.com
objects.airfrance.com
support9.cdnetworks.net
support9.cdnetworks.net
dallas.airfrance.fr
support9.cdnetworks.net
support9.cdnetworks.net
support9.cdnetworks.net
frenchtech.airfrance.com
support9.cdnetworks.net
Certificate
The complete raw certificate details for airfrance.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGHTCCBQWgAwIBAgIQIWShDixdLwO0O5q8yCZqOTANBgkqhkiG9w0BAQsFADCB lTELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G A1UEBxMHU2FsZm9yZDEYMBYGA1UEChMPU2VjdGlnbyBMaW1pdGVkMT0wOwYDVQQD EzRTZWN0aWdvIFJTQSBPcmdhbml6YXRpb24gVmFsaWRhdGlvbiBTZWN1cmUgU2Vy dmVyIENBMB4XDTIyMTAwNDAwMDAwMFoXDTIzMTAwNDIzNTk1OVowcDELMAkGA1UE BhMCTkwxFjAUBgNVBAgTDU5vb3JkLUhvbGxhbmQxMTAvBgNVBAoTKEtvbmlua2xp amtlIEx1Y2h0dmFhcnQgTWFhdHNjaGFwcGlqIE4uVi4xFjAUBgNVBAMTDWFpcmZy YW5jZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxH88MqEXH 8wq1IQmuPeHl+a0lBsje5wblIqv38qfl1i4XDRlMcwHfQ+m5oiNFy89wld6LbRL/ NBVy+HfEoMLZ94dJMBf3acOxWr7CGmS15if7hZqj2i6gVNHbgO0WGqhYkOaLUSup +ogRw1nsrfoBIREWiFBO/FGnIl3+ufrxfq5jxnv9xydp8nyGQF0JGYTpdiV4Otzp qzfVZuq5+QFqS0R4O4mf3UjnSXne01tSR1GIHMIf7JXRYaRGDanH6ZguSiEcP0W6 VI/au9ocnBDhdG9WZ5o94Hd+egMR6Q1haBzGXPPWybczdgs7UKw9tVfNX6KtG9bK JKjZRUd0GpfnAgMBAAGjggKLMIIChzAfBgNVHSMEGDAWgBQX2dYlJ2f5McJJQ9kw NkSMbKlP6zAdBgNVHQ4EFgQUt7XEIQWOqCgXCaiRuIX2DeI3A8IwDgYDVR0PAQH/ BAQDAgWgMAwGA1UdEwEB/wQCMAAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMEoGA1UdIARDMEEwNQYMKwYBBAGyMQECAQMEMCUwIwYIKwYBBQUHAgEWF2h0 dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAECAjBaBgNVHR8EUzBRME+gTaBL hklodHRwOi8vY3JsLnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25W YWxpZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3JsMIGKBggrBgEFBQcBAQR+MHwwVQYI KwYBBQUHMAKGSWh0dHA6Ly9jcnQuc2VjdGlnby5jb20vU2VjdGlnb1JTQU9yZ2Fu aXphdGlvblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQS5jcnQwIwYIKwYBBQUHMAGG F2h0dHA6Ly9vY3NwLnNlY3RpZ28uY29tMBMGCisGAQQB1nkCBAMBAf8EAgUAMIG9 BgNVHREEgbUwgbKCDWFpcmZyYW5jZS5jb22CDCouYWYta2xtLmNvbYIPKi5haXJm cmFuY2UuY29tghIqLmFpcmZyYW5jZWtsbS5jb22CDSouYmx1ZWJpei5jb22CECou Zmx5aW5nYmx1ZS5jb22CCSoua2xtLmNvbYIKYWYta2xtLmNvbYIQYWlyZnJhbmNl a2xtLmNvbYILYmx1ZWJpei5jb22CDmZseWluZ2JsdWUuY29tggdrbG0uY29tMA0G CSqGSIb3DQEBCwUAA4IBAQAo5cLnltV7FkPANn6SQ4d/kitazb2YoSzN4h5bCsQU 2aqhluVkplyjFhOfsWW80YM6MWPtgpqXIKc77x56YZvjPINYSII4iylef6ezodei JIZcQ6jNhBx+2iCEj0RojRLh6fr7gHwQ/V06RGV7Px0ZAuLeiWbBzTNQD9B+6aRC ycMUzf87qoRZPSAhdORCElLibWfKMKWgS7VTp/NT43jDKksMrXWYtbSI2uYqLjdz JJf4iRYbXas951OlKszdF5tKy2LriEksMyK2yan0EhTDU6CYSJD09XAE4iyhCOYM Ac8J0uY2shqMIroYUg3w05vZrv9XXMjX3lR710ozAXoR -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR/PDKhFx/MKtSEJrj3h 5fmtJQbI3ucG5SKr9/Kn5dYuFw0ZTHMB30PpuaIjRcvPcJXei20S/zQVcvh3xKDC 2feHSTAX92nDsVq+whpkteYn+4Wao9ouoFTR24DtFhqoWJDmi1ErqfqIEcNZ7K36 ASERFohQTvxRpyJd/rn68X6uY8Z7/ccnafJ8hkBdCRmE6XYleDrc6as31WbqufkB aktEeDuJn91I50l53tNbUkdRiBzCH+yV0WGkRg2px+mYLkohHD9FulSP2rvaHJwQ 4XRvVmeaPeB3fnoDEekNYWgcxlzz1sm3M3YLO1CsPbVXzV+irRvWyiSo2UVHdBqX 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 44387020137626162240233079156892920377 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-04 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-04 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Koninklijke Luchtvaart Maatschappij N.V.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'airfrance.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22359865476412010487825420897786468797278776552472833587291929660859845713915200255952616872426699531115050807860971949914608672544387799190270375249452883421776150129728377920259770229696569073989699385255523368431014402655814732136604671490659013319732965879348856089092609365943752239605701776746650292914001566132760396289435243373616619026221772286169479068532100934141413859434079021562287192410233263303269281702888371701097593613336691374545382822053302670420209761090346923674679856952646732429947000641749043135025189859991897319369948472430216896798169274791327230591005935704108279021819899391824228947943 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b7b5c421058ea8281709a891b885f60de23703c2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (181 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airfrance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.af-klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfrance.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfranceklm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bluebiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'af-klm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airfranceklm.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bluebiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flyingblue.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klm.com' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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