qaaa.carrental.com

- Avis Budget Group, Inc. -

Issued by

About this certificate

This digital certificate with serial number 55:cc:e3:fa:31:b3:4a:57:36:08:7d:a9:f5:98:2d:9b was issued on by VeriSign Trust Network.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Avis Budget Group, Inc.

Organization: Avis Budget Group, Inc.
Organization unit: Direct Connect
State / Province: New Jersey
Locality: Parsippany
Country: US

VeriSign Trust Network

Organization: VeriSign Trust Network
Organization unit: VeriSign, Inc.
Organization unit: VeriSign International Server CA - Class 3
Organization unit: www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign

This certificate has expire since

Certificate Details

Serial Number (hex): 55:cc:e3:fa:31:b3:4a:57:36:08:7d:a9:f5:98:2d:9b
Serial Number (int): 114048232130261125795151349590068309403
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): 2d:41:4d:56:c2:25:dc:2f:37:bc:35:0c:93:cb:c8:0f:7f:da:f4:df
Fingerprint (sha256): 1a:cf:eb:5e:93:ea:22:22:65:f3:01:d3:3b:e9:ff:a6:c3:60:91:56:76:11:13:46:97:98:25:96:e5:45:25:02

Issuing Certificate URL: http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRIntl-crl.verisign.com/SVRIntl.crl

Check the revocation status for certificate qaaa.carrental.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qaaa.carrental.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Netscape Server-Gated Cryptography
Microsoft Server-Gated Cryptography
Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qaaa.carrental.com

Other certificates including the domain name carrental.com

(limited to 100 certificates)
qaservices.carrental.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.carrental.com
*.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
services.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
qa-api.carrental.com
www.avisbudgetgroup.com
qai-b-services.carrental.com
www.avisbudgetgroup.com
services.carrental.com
prodi-c-services.carrental.com
qaservices.carrental.com
prodi-c-api1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
UATI2.OMEGASERVICES.CARRENTAL.COM
qaaa.carrental.com
www.avisbudgetgroup.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
sites.carrental.com
www.avisbudgetgroup.com
omegaservices.carrental.com
www.carrental.com
aa.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
qaservices.carrental.com
www.avisbudget.com
www.carrental.com
qaaa.carrental.com
prodi-c-api.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
uati-b-services.carrental.com
www.avisbudget.com
sites.carrental.com
uat.omegaservices.carrental.com
qabook1.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
uat-api.carrental.com
*.carrental.com
book1.carrental.com
qaservices.carrental.com
prodi-b-services.carrental.com
www.carrental.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
prodi-b-api.carrental.com
www.avisbudget.com
book1.carrental.com
sites.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
qaservices.carrental.com
uat.omegaservices.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
qabook1.carrental.com
qabook1.carrental.com
qa-api.carrental.com
book1.carrental.com
book1.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
*.carrental.com
uat.omegaservices.carrental.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com

Certificate

The complete raw certificate details for qaaa.carrental.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEPDCCA6WgAwIBAgIQVczj+jGzSlc2CH2p9ZgtmzANBgkqhkiG9w0BAQUFADCB
ujEfMB0GA1UEChMWVmVyaVNpZ24gVHJ1c3QgTmV0d29yazEXMBUGA1UECxMOVmVy
aVNpZ24sIEluYy4xMzAxBgNVBAsTKlZlcmlTaWduIEludGVybmF0aW9uYWwgU2Vy
dmVyIENBIC0gQ2xhc3MgMzFJMEcGA1UECxNAd3d3LnZlcmlzaWduLmNvbS9DUFMg
SW5jb3JwLmJ5IFJlZi4gTElBQklMSVRZIExURC4oYyk5NyBWZXJpU2lnbjAeFw0x
MjA5MjgwMDAwMDBaFw0xMzA5MjkyMzU5NTlaMIGPMQswCQYDVQQGEwJVUzETMBEG
A1UECBMKTmV3IEplcnNleTETMBEGA1UEBxQKUGFyc2lwcGFueTEgMB4GA1UEChQX
QXZpcyBCdWRnZXQgR3JvdXAsIEluYy4xFzAVBgNVBAsUDkRpcmVjdCBDb25uZWN0
MRswGQYDVQQDFBJxYWFhLmNhcnJlbnRhbC5jb20wgZ8wDQYJKoZIhvcNAQEBBQAD
gY0AMIGJAoGBAKO8aQTaJY8AQHmdOshDsN1W27cVa51D4glzb+b8PjlAqko7XLUV
3/IGsGB+H8c3Y/KGFan/Ty/Me2EvzJJRtE9x1Rw+a1M9JyR3ALE4IxFfHHUM3CgN
RARsJ90+diZPeJxDzdY2uP+0ZM43iB4cZSpUEvRRzF3m4xxWjwXo2fPdAgMBAAGj
ggFqMIIBZjAdBgNVHREEFjAUghJxYWFhLmNhcnJlbnRhbC5jb20wCQYDVR0TBAIw
ADAOBgNVHQ8BAf8EBAMCBaAwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL1NWUklu
dGwtY3JsLnZlcmlzaWduLmNvbS9TVlJJbnRsLmNybDBDBgNVHSAEPDA6MDgGCmCG
SAGG+EUBBzYwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cudmVyaXNpZ24uY29t
L2NwczA0BgNVHSUELTArBglghkgBhvhCBAEGCisGAQQBgjcKAwMGCCsGAQUFBwMB
BggrBgEFBQcDAjBxBggrBgEFBQcBAQRlMGMwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLnZlcmlzaWduLmNvbTA7BggrBgEFBQcwAoYvaHR0cDovL1NWUkludGwtYWlh
LnZlcmlzaWduLmNvbS9TVlJJbnRsLWFpYS5jZXIwDQYJKoZIhvcNAQEFBQADgYEA
EPymAwN5TBSX2ZEGBU7YLuXxmIwJHNAsa6NHoWMT58ReFgbikJw6+4UnMVVOxcFA
+1HkzwopWF0UAyi/x9sX8JkoVctVzYThOWUg6ubEbSVL8XN8WQaY3W+jpsKkda9r
o1Hi6tqe6VBbyiu15Dbl6AMmJsAksrrtz+h/WEsYTG0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCjvGkE2iWPAEB5nTrIQ7DdVtu3
FWudQ+IJc2/m/D45QKpKO1y1Fd/yBrBgfh/HN2PyhhWp/08vzHthL8ySUbRPcdUc
PmtTPSckdwCxOCMRXxx1DNwoDUQEbCfdPnYmT3icQ83WNrj/tGTON4geHGUqVBL0
Ucxd5uMcVo8F6Nnz3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114048232130261125795151349590068309403
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign International Server CA - Class 3'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.verisign.com/CPS Incorp.by Ref. LIABILITY LTD.(c)97 VeriSign'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Parsippany'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Avis Budget Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Direct Connect'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'qaaa.carrental.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 114979313520905714303638175687043710963505940715047907667274796739728923120705096343144406437181499934671693804923539662960835583302567249953017895407511873657483937312396464711521075749563467122577316356779703867407918654923181273627310464404236025302866994513192315460654011905805088051160460703836621370333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaaa.carrental.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-crl.verisign.com/SVRIntl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRIntl-aia.verisign.com/SVRIntl-aia.cer'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (1024 bits)
		0010fca60303794c1497d99106054ed82ee5f1988c091cd02c6ba347a16313e7c45e1606e2909c3afb852731554ec5c140fb51e4cf0a29585d140328bfc7db17f0992855cb55cd84e1396520eae6c46d254bf1737c590698dd6fa3a6c2a475af6ba351e2eada9ee9505bca2bb5e436e5e8032626c024b2baedcfe87f584b184c6d