points-storefront.flyingblue.ca

- SOCIETE AIR FRANCE -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 78:2b:7d:70:ab:7d:a1:9c:27:68:58:cd:a2:ac:68:57 was issued on by Sectigo Limited.

With 61 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SOCIETE AIR FRANCE

Organization: SOCIETE AIR FRANCE
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): 78:2b:7d:70:ab:7d:a1:9c:27:68:58:cd:a2:ac:68:57
Serial Number (int): 159733172486935375981329732574754138199
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 86:33:90:9a:2e:e6:33:ac:c6:37:50:45:fb:3d:22:59:39:33:7b:f3
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 56:a7:e4:5d:01:34:ed:40:62:c6:2b:6b:87:d1:9c:4c:3c:7a:76:42
Fingerprint (sha256): e0:ad:bf:ab:1e:db:6c:8d:b7:12:7f:84:57:dc:a3:92:62:67:ae:fd:eb:1f:27:3b:ae:25:b3:ef:d1:c7:e2:c7

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate points-storefront.flyingblue.ca

61

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for points-storefront.flyingblue.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

points-storefront.flyingblue.ca
points-storefront.flyingblue.ae
points-storefront.flyingblue.am
points-storefront.flyingblue.at
points-storefront.flyingblue.aw
points-storefront.flyingblue.az
points-storefront.flyingblue.ba
points-storefront.flyingblue.be
points-storefront.flyingblue.bz
points-storefront.flyingblue.cf
points-storefront.flyingblue.ch
points-storefront.flyingblue.ci
points-storefront.flyingblue.cl
points-storefront.flyingblue.cm
points-storefront.flyingblue.cn
points-storefront.flyingblue.cw
points-storefront.flyingblue.de
points-storefront.flyingblue.dj
points-storefront.flyingblue.dk
points-storefront.flyingblue.do
points-storefront.flyingblue.ee
points-storefront.flyingblue.es
points-storefront.flyingblue.fi
points-storefront.flyingblue.fr
points-storefront.flyingblue.ga
points-storefront.flyingblue.ge
points-storefront.flyingblue.gp
points-storefront.flyingblue.gq
points-storefront.flyingblue.gr
points-storefront.flyingblue.hn
points-storefront.flyingblue.hr
points-storefront.flyingblue.ht
points-storefront.flyingblue.hu
points-storefront.flyingblue.ie
points-storefront.flyingblue.is
points-storefront.flyingblue.kz
points-storefront.flyingblue.la
points-storefront.flyingblue.lc
points-storefront.flyingblue.lu
points-storefront.flyingblue.lv
points-storefront.flyingblue.ma
points-storefront.flyingblue.mg
points-storefront.flyingblue.ml
points-storefront.flyingblue.mq
points-storefront.flyingblue.mu
points-storefront.flyingblue.nc
points-storefront.flyingblue.nl
points-storefront.flyingblue.no
points-storefront.flyingblue.pl
points-storefront.flyingblue.pt
points-storefront.flyingblue.rs
points-storefront.flyingblue.rw
points-storefront.flyingblue.sc
points-storefront.flyingblue.se
points-storefront.flyingblue.si
points-storefront.flyingblue.sk
points-storefront.flyingblue.sn
points-storefront.flyingblue.sr
points-storefront.flyingblue.sx
points-storefront.flyingblue.tg
points-storefront.flyingblue.us

Other certificates including the domain name flyingblue.ca

(limited to 100 certificates)
flyingblue.ca
www.flyingblue.us
points-storefront.flyingblue.ca
www.flyingblue.us
flyingblue.ca
flyingblue.nl
flyingblue.ca
www.flyingblue.us
flyingblue.ca
flyingblue.nl
www.flyingblue.us
www.flyingblue.nl
points-storefront.flyingblue.ca
www.flyingblue.us

Certificate

The complete raw certificate details for points-storefront.flyingblue.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyn/WWt+z6WkQWNi/Kh4
Cv2y7WM2v5uAlHdBfhozaqXbU3ghIPHCl8g5LgTiX7XqFRkFi76x0zzq4vh44i17
0xurpdck9Bv9lLgwNclIH4M3Tbh6q0wOraU7NXXKPjv254U6B7mjCzVSJ7hSYWe1
QLzlj2J7IJxhx3xCh10DDjgiTVWVL8SAZOvu9b5z2vYsA9xPcQBs53HIlPKp0nyD
cwUPEkxXqCSECC67G9TRoFv0lEpdehhwbjtOu2s7bz/PmY1wviWAiAEBxb8RhdpB
3NZuzov/kqlBCnmLouEl9ugs3OQHE9ITmK0j0tPSdv3T1kXar1EDx/HJxYbyScdQ
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159733172486935375981329732574754138199
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SOCIETE AIR FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'points-storefront.flyingblue.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19587646988234082419153513235155743148923448963609156617180340311709036104087423672542801885278233151317088907295083806308264169546982154268126962689704473643817864740846019731184008987100937446256960913518280231566162962250561750760934475463896764834301897746667940733593806064496115636892774736725080867961268541155430069852001883651511715670699188762381867218933036930942554780504259797455601411164959742047171173479282442344245574666245495536673683641301436770554116091949772940115730389060911228625817503036509194474116506070978927938310712098392723365900801802145332409825126897548408311210679236991508002853067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8633909a2ee633acc6375045fb3d225939337bf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2017 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.aw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.dj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ga'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ht'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.ml'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.rw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.sx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.tg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'points-storefront.flyingblue.us'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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