cdn-test.klm.com

- KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 29:91:8b:14:9e:4c:ad:c5:dd:21:18:70:85:a2:c1:05 was issued on by COMODO CA Limited.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.

Organization: KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.
Organization unit: WebSystems
Address: Amsterdamseweg 55
Postal code: 1182 GP
State / Province: Noord-Holland
Locality: AMSTELVEEN
Country: NL

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 29:91:8b:14:9e:4c:ad:c5:dd:21:18:70:85:a2:c1:05
Serial Number (int): 55254051760158589196076087451406483717
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 38:01:cf:26:58:d9:f4:c4:ce:87:12:f3:88:8c:c1:b3:a3:45:67:86
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): 0a:1d:e1:df:7f:2f:9f:b4:f7:71:79:39:72:bb:bc:aa:52:b1:6c:26
Fingerprint (sha256): 37:f5:60:bf:46:0f:9d:b3:a8:6a:70:01:16:64:bb:c0:58:c6:27:01:25:13:3e:75:f7:12:a4:f4:38:96:03:57

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate cdn-test.klm.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdn-test.klm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdn-test.klm.com
*.airfrance.com
*.airfrance.fr
*.airfranceklm.com
*.flyingblue.com
*.klm.co.in
*.klm.com
*.klm.fr
*.klm.nl
*.static-af.com
*.static-fb.com
*.static-kl.com

Other certificates including the domain name klm.com

(limited to 100 certificates)
vanity-ae.klm.com
gofuel-acc-ute.klm.com
origin.api.ee1.klm.com
nieuws.klm.com
imperva.com
airlines.api.amadeus.com
kiosk.ute2.klm.com
origin.api.klm.com
*.cf.devnet.klm.com
travel-with-kids.klm.com
campaigndesigner.klm.com
www.iseatz.com
campagnes.klm.com
werelddeal.klm.com
ba.ite2.klm.com
flightguide.klm.com
sustainability.klm.com
materials.klm.com
api.ee1.klm.com
origin.api.ae3.klm.com
flightoffers.klm.com
werelddeal.klm.com
china.klm.com
werelddeal.klm.com
flightoffers.klm.com
getaways.klm.com
flexfares.klm.com
evenweg.klm.com
san1.klmonline.com
flexfares.klm.com
payments.klm.com
flyforward.klm.com
www.klm.com
services2.klm.com
aefederation.klm.com
services.ae1.klm.com
fes-dev.klm.com
flightbundle.klm.com
fes.klm.com
houses.klm.com
evenweg.klm.com
china.klm.com
packyourdestination.klm.com
co2.ehn.klm.com
ehn.klm.com
kiosk.klm.com
san1.klmonline.com
san1.klmonline.com
services.ite2.klm.com
md11farewellflight.klm.com
upgradeyourself.klm.com
bb.klm.com
services.ave1.klm.com
ba.ee.klm.com
caretag.klm.com
developer-test.klm.com
www.se2.klm.com
partsofaperfectjourney.klm.com
www.iseatz.com
habile-challenges.klm.com
imperva.com
transactions.klm.com
destinationmatch.klm.com
services.ute2.klm.com
klm.com
evenweg.klm.com
connect.klm.com
cuba.klm.com
campaigndesigner2.klm.com
san1.klmonline.com
san1.klmonline.com
fes-acc.klm.com
werelddeal.klm.com
services.ae2.klm.com
federation.klm.com
escapades.klm.com
klpl03.klm.com
*.ams.cloud.klm.com
campagnes.klm.com
csr.klm.com
www3.ute1.klm.com
blog-origin.klm.com
flightbundle.klm.com
san1.klmonline.com
*.klm.com
daytripper.klm.com
mysteryticket.klm.com
flightbundle.klm.com
ers.klm.com
secure.klm.com
imperva.com
webmail.klm.com
flyforward.klm.com
payments.test.klm.com
digital.publications.klm.com
aend.klm.com
destinationmatch.klm.com
china.klm.com
evenweg.klm.com
mysteryticket.klm.com

Certificate

The complete raw certificate details for cdn-test.klm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq/vqu9PNrQRmztQXCSj
AEgHjqEe2pdue0lETPH94011A39RYAD3ChGzvl+zi1B/1/gOpZ9i0FHFZwUnIrsc
x+OXgcIL49jdZsF6M4dPnkeA/r915AjfWvGJHmnxXr+4zHCJEZEcuzXdhzpDe/Hp
+KeJuNj/hWBUfmK6t1bH4xXXc/ETBqbtt9/PBoqzWlu+MXu4xerOiWhE2qsbmEH7
WwhFiFd2sC+nLkcYsjmBC4U8pt1YrgKHeKeAI0u210dgnjlI13PXoy3E8BIHbidp
vvuPdikYoi4+qbZK70tfoszOr/7MD4f07mbRXCd0zONrtodjwpqDPUefnZkkvqzY
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55254051760158589196076087451406483717
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1182 GP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMSTELVEEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdamseweg 55'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KONINKLIJKE LUCHTVAART MAATSCHAPPIJ N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WebSystems'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cdn-test.klm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24576988538117200369786739532993526420065398041748283657632904863154146627029957720930050038796597937175333069721496350900279580928707122193049447503016492493316482969078673341979220391123347752361351238450825839218042056210719518750590854531725637676462094456594660261044839353463566880040526042313218976933001911892890102587433732551307736276901883358709850272168313474696262482989254606082106902239968433288002878159469334055463259686807740778200378591207563870909822642957086781106871097990482638862214697167054211403468499458848767337701445141461915903199521601947705060742719574787495666729827022911450813093921
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3801cf2658d9f4c4ce8712f3888cc1b3a3456786
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (187 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-test.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfrance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfrance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.airfranceklm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flyingblue.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klm.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klm.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.klm.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static-af.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static-fb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.static-kl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001632a1122e0000004030046304402206f14abaa811196dfd133ddcc9188b65333f7654c197425646578f710444ee7fe02205b3978674fb590b9a55a16c220f0537ba2ad1028c61ad64822bbedbf0b139542007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001632a111f9d0000040300483046022100833da49f98b176d8d68dbf115302ef94f9a7acbbdc6e9b6987eb8920f11081e3022100c00f01fa998655cbe4ea40048f687a55f5b7f379f7feb0d57c666b453beba78e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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