services.carrental.com
- Avis Budget Group, Inc. -
Issued by GeoTrust TLS RSA CA G1
About this certificate
This digital certificate with serial number 04:07:75:65:82:92:02:e1:3e:3c:28:23:94:5b:78:c3 was issued on by DigiCert Inc.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Avis Budget Group, Inc.
Organization:
Avis Budget Group, Inc.
State / Province:
New Jersey
Locality: Parsippany-Troy Hills
Country: US
Locality: Parsippany-Troy Hills
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:07:75:65:82:92:02:e1:3e:3c:28:23:94:5b:78:c3Serial Number (int): 5355639145527016517326121071665707203
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 56:18:de:62:f0:73:e6:db:df:da:0b:82:fc:3a:b7:37:77:65:9d:71
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57
Fingerprint (sha1): 05:78:1d:fd:a5:d6:c3:a5:1b:47:f9:4e:44:9e:0b:02:15:94:88:4c
Fingerprint (sha256): 11:55:b2:87:d3:9d:db:c1:0b:08:4d:c0:34:73:3b:70:f7:19:d3:a1:43:2a:18:7a:a0:95:d1:63:3e:19:07:2b
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl
Check the revocation status for certificate services.carrental.com
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for services.carrental.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
services.carrental.com
cf.services.carrental.com
xml-services.carrental.com
cf.services.carrental.com
xml-services.carrental.com
Other certificates including the domain name carrental.com
(limited to 100 certificates)
qaservices.carrental.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.carrental.com
*.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
services.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
qa-api.carrental.com
www.avisbudgetgroup.com
qai-b-services.carrental.com
www.avisbudgetgroup.com
services.carrental.com
prodi-c-services.carrental.com
qaservices.carrental.com
prodi-c-api1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
UATI2.OMEGASERVICES.CARRENTAL.COM
qaaa.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
sites.carrental.com
www.avisbudgetgroup.com
omegaservices.carrental.com
www.carrental.com
aa.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
qaservices.carrental.com
www.avisbudget.com
www.carrental.com
qaaa.carrental.com
prodi-c-api.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
uati-b-services.carrental.com
www.avisbudget.com
sites.carrental.com
uat.omegaservices.carrental.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
uat-api.carrental.com
*.carrental.com
book1.carrental.com
qaservices.carrental.com
prodi-b-services.carrental.com
www.carrental.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
prodi-b-api.carrental.com
www.avisbudget.com
book1.carrental.com
sites.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
qaservices.carrental.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
qabook1.carrental.com
qabook1.carrental.com
qa-api.carrental.com
book1.carrental.com
book1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
*.carrental.com
uat.omegaservices.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.carrental.com
*.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
services.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
qa-api.carrental.com
www.avisbudgetgroup.com
qai-b-services.carrental.com
www.avisbudgetgroup.com
services.carrental.com
prodi-c-services.carrental.com
qaservices.carrental.com
prodi-c-api1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
UATI2.OMEGASERVICES.CARRENTAL.COM
qaaa.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
sites.carrental.com
www.avisbudgetgroup.com
omegaservices.carrental.com
www.carrental.com
aa.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
qaservices.carrental.com
www.avisbudget.com
www.carrental.com
qaaa.carrental.com
prodi-c-api.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
uati-b-services.carrental.com
www.avisbudget.com
sites.carrental.com
uat.omegaservices.carrental.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
uat-api.carrental.com
*.carrental.com
book1.carrental.com
qaservices.carrental.com
prodi-b-services.carrental.com
www.carrental.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
prodi-b-api.carrental.com
www.avisbudget.com
book1.carrental.com
sites.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
qaservices.carrental.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
qabook1.carrental.com
qabook1.carrental.com
qa-api.carrental.com
book1.carrental.com
book1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
*.carrental.com
uat.omegaservices.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
Certificate
The complete raw certificate details for services.carrental.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGyDCCBbCgAwIBAgIQBAd1ZYKSAuE+PCgjlFt4wzANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx MB4XDTIzMTAxNjAwMDAwMFoXDTI0MTExNTIzNTk1OVowgYUxCzAJBgNVBAYTAlVT MRMwEQYDVQQIEwpOZXcgSmVyc2V5MR4wHAYDVQQHExVQYXJzaXBwYW55LVRyb3kg SGlsbHMxIDAeBgNVBAoTF0F2aXMgQnVkZ2V0IEdyb3VwLCBJbmMuMR8wHQYDVQQD ExZzZXJ2aWNlcy5jYXJyZW50YWwuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAryS0A44kPJ3OQPWMSuTRag5AYdHmzOlvmrfvcfkE832eXCdqySqC 1LSG4FwKDNB5T+ib0N1AweTvGJMutdF4fGzd2b63esRNev4ZVnr0kcAfYL3XsojB nfhHNYA4Q8Ew8huOTK8Y66WiALgURmUg7Xm1jGj1QzzyLP09SGuvSt6zGKrQylGp 1HgAsbG34iZfHb2i0RRyXhIU5JTMOrd+ufuO4U3XjVxBGbdDW7EZNaSe1FninhyV WbUvp1yblQxAs3g72UsvnK30L9+fUDpolLdI02J9rQta6f+GriyAKpU3Qy5UGgFk /aqw2ZcHPTtLZc9nRh9izE/cMmmTv7DXRwIDAQABo4IDVjCCA1IwHwYDVR0jBBgw FoAUlE/UXYvkpOKmgP792PkA76O+AlcwHQYDVR0OBBYEFFYY3mLwc+bb39oLgvw6 tzd3ZZ1xMFgGA1UdEQRRME+CFnNlcnZpY2VzLmNhcnJlbnRhbC5jb22CGWNmLnNl cnZpY2VzLmNhcnJlbnRhbC5jb22CGnhtbC1zZXJ2aWNlcy5jYXJyZW50YWwuY29t MD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cu ZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB BQUHAwEGCCsGAQUFBwMCMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jZHAuZ2Vv dHJ1c3QuY29tL0dlb1RydXN0VExTUlNBQ0FHMS5jcmwwdgYIKwYBBQUHAQEEajBo MCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA+BggrBgEF BQcwAoYyaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0VExTUlNB Q0FHMS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo AHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGLOhuwrAAABAMA RzBFAiBcV9wdifWRoynUU3T5F0GtkHqEjrLoOSItr9solmZyGAIhAJJ3JsfIlrYn KhezGcA/vGORmaoGqlbxHoHLfQ6Pn3I5AHUASLDja9qmRzQP5WoC+p0w6xxSActW 3SyB2bu/qznYhHMAAAGLOhuw5gAABAMARjBEAiAdQewMQuEx2Mj5hyC6FYd+5uhy jgidESv6rlFOyUyvzAIgTruMQmv/kAO0t5zAXM4IazQSoVB4li70gg+0pEruy9QA dwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYs6G7DhAAAEAwBI MEYCIQDJ9xOgbcgCW+eOyWwQj0st5rKRPEMb+5xf2/B4/eYqkwIhAKHvNXObeFN/ OXB+6/N5Sb1nKFDDxhpKwB/iHSgSx2v4MA0GCSqGSIb3DQEBCwUAA4IBAQBTwPwM jSfOyoRX2vveOO9QAqwFex5NrQl2l7fmCGp83c7tCce4c+0rWwoU2Ub2qFtOohSv myQ13GxL2D4z6T7E+rMXkPYxYfJub1lNvrO2S3ecDpT1FSXz7hd+MxucBEyGN7VW rQkkgSCkySP/l6KFD0fOVd7vkr857IhYAyMXSbiEIm8GQgCSQx94RD4fKNVRDPE6 qFInai2w9EZsBgsPeoG6az1LiAd/+o1m/o5DhxrODrNtWA8hHEe7UaIJZM3RxZ+F 0hk0DIOrDpmPTY7RE0sm92u9TxBWEkxogDQok/T/zSNOM/5WuTxh3iI5VpD7Zm+S /zx/yzmFklVvJ39Q -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAryS0A44kPJ3OQPWMSuTR ag5AYdHmzOlvmrfvcfkE832eXCdqySqC1LSG4FwKDNB5T+ib0N1AweTvGJMutdF4 fGzd2b63esRNev4ZVnr0kcAfYL3XsojBnfhHNYA4Q8Ew8huOTK8Y66WiALgURmUg 7Xm1jGj1QzzyLP09SGuvSt6zGKrQylGp1HgAsbG34iZfHb2i0RRyXhIU5JTMOrd+ ufuO4U3XjVxBGbdDW7EZNaSe1FninhyVWbUvp1yblQxAs3g72UsvnK30L9+fUDpo lLdI02J9rQta6f+GriyAKpU3Qy5UGgFk/aqw2ZcHPTtLZc9nRh9izE/cMmmTv7DX RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 5355639145527016517326121071665707203 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parsippany-Troy Hills' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avis Budget Group, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'services.carrental.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22109802381307199258368899799524598188019573268353833097171007713306379964900887175399920379836153545009065225484952216827549109953519342213211612141964467058931473133511163244513686814428486853938530496693910673536951735958194072516441869886121327962862015821994424583037043293233178961428752533258513555692423589733137371290268113676941137727511575633747232895457820597638918241734082490320660536732726365396305264985162868191543908922346535522545820919270898047862818986627109079490023264341821583014138457797154394796921138785839673963276837202756000623106255246706058424075878642737086712078797770856357214345031 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5618de62f073e6dbdfda0b82fc3ab73777659d71 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.carrental.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.services.carrental.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xml-services.carrental.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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