points-storefront.flyingblue.ca

- SOCIETE AIR FRANCE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 68:e1:6b:72:31:bd:a5:b9:9e:48:26:75:f6:6b:9c:2f was issued on by Sectigo Limited.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SOCIETE AIR FRANCE

Organization: SOCIETE AIR FRANCE
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 68:e1:6b:72:31:bd:a5:b9:9e:48:26:75:f6:6b:9c:2f
Serial Number (int): 139410157620033739428960952716792405039
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:33:90:9a:2e:e6:33:ac:c6:37:50:45:fb:3d:22:59:39:33:7b:f3
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): a5:ed:58:8e:98:f2:ac:b3:da:a2:fc:c6:48:58:31:22:cf:30:51:75
Fingerprint (sha256): 36:dc:33:f8:67:d9:a5:da:2f:0f:e0:11:6a:0d:5c:f3:b3:3f:5a:50:8b:e0:ab:ef:51:bc:eb:36:96:6e:c0:f9

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate points-storefront.flyingblue.ca

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for points-storefront.flyingblue.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

points-storefront.flyingblue.ca
points-storefront.flyingblue.ae
points-storefront.flyingblue.am
points-storefront.flyingblue.at
points-storefront.flyingblue.aw
points-storefront.flyingblue.az
points-storefront.flyingblue.ba
points-storefront.flyingblue.be
points-storefront.flyingblue.bz
points-storefront.flyingblue.cf
points-storefront.flyingblue.ch
points-storefront.flyingblue.ci
points-storefront.flyingblue.cl
points-storefront.flyingblue.cm
points-storefront.flyingblue.cn
points-storefront.flyingblue.cw
points-storefront.flyingblue.de
points-storefront.flyingblue.dj
points-storefront.flyingblue.dk
points-storefront.flyingblue.do
points-storefront.flyingblue.ee
points-storefront.flyingblue.es
points-storefront.flyingblue.fi
points-storefront.flyingblue.fr
points-storefront.flyingblue.ga
points-storefront.flyingblue.ge
points-storefront.flyingblue.gp
points-storefront.flyingblue.gq
points-storefront.flyingblue.gr
points-storefront.flyingblue.hn
points-storefront.flyingblue.hr
points-storefront.flyingblue.ht
points-storefront.flyingblue.hu
points-storefront.flyingblue.ie
points-storefront.flyingblue.is
points-storefront.flyingblue.kz
points-storefront.flyingblue.la
points-storefront.flyingblue.lc
points-storefront.flyingblue.lu
points-storefront.flyingblue.lv
points-storefront.flyingblue.ma
points-storefront.flyingblue.mg
points-storefront.flyingblue.ml
points-storefront.flyingblue.mq
points-storefront.flyingblue.mu
points-storefront.flyingblue.nc
points-storefront.flyingblue.nl
points-storefront.flyingblue.no
points-storefront.flyingblue.pl
points-storefront.flyingblue.pt
points-storefront.flyingblue.rs
points-storefront.flyingblue.rw
points-storefront.flyingblue.sc
points-storefront.flyingblue.se
points-storefront.flyingblue.si
points-storefront.flyingblue.sk
points-storefront.flyingblue.sn
points-storefront.flyingblue.sr
points-storefront.flyingblue.sx
points-storefront.flyingblue.tg
points-storefront.flyingblue.us

Other certificates including the domain name flyingblue.ca

(limited to 100 certificates)
flyingblue.ca
www.flyingblue.us
points-storefront.flyingblue.ca
www.flyingblue.us
flyingblue.ca
flyingblue.nl
flyingblue.ca
www.flyingblue.us
flyingblue.ca
flyingblue.nl
www.flyingblue.us
www.flyingblue.nl
points-storefront.flyingblue.ca
www.flyingblue.us

Certificate

The complete raw certificate details for points-storefront.flyingblue.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyn/WWt+z6WkQWNi/Kh4
Cv2y7WM2v5uAlHdBfhozaqXbU3ghIPHCl8g5LgTiX7XqFRkFi76x0zzq4vh44i17
0xurpdck9Bv9lLgwNclIH4M3Tbh6q0wOraU7NXXKPjv254U6B7mjCzVSJ7hSYWe1
QLzlj2J7IJxhx3xCh10DDjgiTVWVL8SAZOvu9b5z2vYsA9xPcQBs53HIlPKp0nyD
cwUPEkxXqCSECC67G9TRoFv0lEpdehhwbjtOu2s7bz/PmY1wviWAiAEBxb8RhdpB
3NZuzov/kqlBCnmLouEl9ugs3OQHE9ITmK0j0tPSdv3T1kXar1EDx/HJxYbyScdQ
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 139410157620033739428960952716792405039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE AIR FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'points-storefront.flyingblue.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19587646988234082419153513235155743148923448963609156617180340311709036104087423672542801885278233151317088907295083806308264169546982154268126962689704473643817864740846019731184008987100937446256960913518280231566162962250561750760934475463896764834301897746667940733593806064496115636892774736725080867961268541155430069852001883651511715670699188762381867218933036930942554780504259797455601411164959742047171173479282442344245574666245495536673683641301436770554116091949772940115730389060911228625817503036509194474116506070978927938310712098392723365900801802145332409825126897548408311210679236991508002853067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8633909a2ee633acc6375045fb3d225939337bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.aw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.dj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ht'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.us'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00623e7de6e6bbe49be256cc0d595506c714a860403fe9da9e3c51a4f055b25c6a3d314a310acb357dc6943e9d09523126d20219218d0bb5a13b993a50be2f3c725ff6b33cc99b4a1316f3a6565ec35d15ab2815f5b1c111447982ec5922322f5b11c28cb9ec1990cb8d9686c7031e293ce223a6a7b2c948bbd57d58fd28d9f508cea8a1409db33357e0ea87079bf9afbeaf3f8cd907c843b011acf6d7ad6ed9c69b2a45e1d6b3e68de014ffe32a49728ff3d8e3f4c38af4e957a7a35242b5e96024e990eedad609fdbd6e785ad36dca7cc73f273f327b9166b82a196e8e0bf84d0c6704696988723876a6898fae56236fea2ce08994f623474d950d3fb3cd15cb