*.avis.co.nz

- Avis Budget Group Inc. -

Issued by Verizon Akamai SureServer CA G14-SHA1

About this certificate

This digital certificate with serial number 04:69:55:4c:d4:1f:c3:00:58:2c:a5:47:dc:04:a7:dc:16:12:cf:6a was issued on by Verizon Enterprise Solutions.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

Avis Budget Group Inc.

Organization: Avis Budget Group Inc.
Organization unit: Information Technology
State / Province: NJ
Locality: Parsippany
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 04:69:55:4c:d4:1f:c3:00:58:2c:a5:47:dc:04:a7:dc:16:12:cf:6a
Serial Number (int): 25184972016866410545260123081955985718819082090
Serial Number lenght: 155 bits, 20 octets

SubjectKeyId: 82:10:fd:d3:ab:b2:9e:93:fd:68:c0:08:42:99:6d:b6:3d:b4:3c:1d
AuthorityKeyId: dd:6c:80:7c:ba:b5:32:17:a5:84:41:40:f0:d2:04:66:13:2f:a9:90

Fingerprint (sha1): 44:c0:0a:e3:7c:c8:e7:4b:53:2b:3b:33:cb:2b:13:30:8a:ab:36:24
Fingerprint (sha256): 17:2d:44:d3:5a:63:0c:1d:c5:bf:dc:03:42:82:8f:5f:87:74:fa:81:52:f8:ca:88:ad:76:e1:63:9e:f7:71:3f

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg141.der

Revocation information

OCSP Server: http://vassg141.ocsp.omniroot.com
CRL Distribution Point: http://vassg141.crl.omniroot.com/vassg141.crl

Check the revocation status for certificate *.avis.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.avis.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avis.co.nz

Other certificates including the domain name avis.co.nz

(limited to 100 certificates)
mqa.avis.co.nz
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudgetgroup.com
ecommisc.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
*.avis.co.nz
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
click.e.avis.co.nz
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
pages.e.avis.co.nz
ecommisc.avisbudget.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
click.e.avis.co.nz
www.avisbudget.com
www.avisbudget.com
ecomaws.avisbudget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
mqa.avis.co.nz
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
*.avis.co.nz
www.avisbudgetgroup.com
ecomaws.avisbudget.com
www.avisbudget.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
view.e.avis.co.nz
www.avisbudget.com
www.avisbudget.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudgetgroup.com
akamai-san9.exacttarget.com
www.avis.co.nz
akamai-san9.exacttarget.com
www.avis.co.nz
qa.avis.co.nz
ecommisc.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com

Certificate

The complete raw certificate details for *.avis.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuz3/slEHMxK0gwyZ2CMm
irQSvnvDkEgdm90K6Q0ecQZsBobuPYm+68jUbeuARi/W0aJreOTweglc/tZqByXS
c10Vx956CTj3UVQusySKwOSCyyL7L3BATlCWZTaGET3rdYmBkEjlmEwA8BelCUx7
vAPeNu162G7pjJrx3aaP31TBfOcHIYZmCthT1H3Ikllvi21VOHv0Zsj+CFGlgJXN
sXAUytDASE5KglADjvbefg0q6PnmsAzlw/XqqyJ2zCECgRT7ymjQZ5GH6uGovGu4
9A0Ouz6ccvgFAtxDMi9jdePLIYW9S60DL45Yzl+r5N8OD8o543KX/5lVRjVgMGHT
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 25184972016866410545260123081955985718819082090
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-20 22:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-20 22:09:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NJ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parsippany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avis Budget Group Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avis.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23637135783616152778818301596826402260990398392992465363731107812432057029352676670828739216796189564444429734686545363903000694908751147693974424757951697775271723705750681951086350767927515259452630820295098636828484055129890965973789513504164464887183836546528762016961423498943419437003439195014971440586117569648874254533762299200839174666792787597423788646184737640955932538208563387483903203731760666769755655451135564442183799272021661941720351599490718727219513815148900221690588905590938497096214960978538470757264242684750385234341383974457062880311141824511259806896459851076478748103553117229012425495341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg141.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avis.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dd6c807cbab53217a5844140f0d20466132fa990
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg141.crl.omniroot.com/vassg141.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8210fdd3abb29e93fd68c00842996db63db43c1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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