AVISMD.AVISBUDGET.COM
- Avis Budget Group, Inc. -
Issued by DigiCert Global CA G2
About this certificate
This digital certificate with serial number 0c:a1:01:5f:00:81:b1:ec:51:74:8d:8b:24:75:0e:27 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Avis Budget Group, Inc.
Organization:
Avis Budget Group, Inc.
Organization unit: AVIS INTERACTIVE PREMIUM SSL
Organization unit: AVIS INTERACTIVE PREMIUM SSL
State / Province:
New Jersey
Locality: Parsippany
Country: US
Locality: Parsippany
Country: US
DigiCert Inc
Organization:
DigiCert Inc
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0c:a1:01:5f:00:81:b1:ec:51:74:8d:8b:24:75:0e:27Serial Number (int): 16786723552884931878720418295611461159
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2e:2c:77:62:51:17:3c:80:fb:92:75:47:16:cd:74:5c:e5:2d:5b:60
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20
Fingerprint (sha1): 4c:a8:02:d8:46:f2:a0:90:6f:1b:b7:15:fa:20:7a:2e:41:65:90:7c
Fingerprint (sha256): 1b:c5:28:3c:38:4e:98:f7:fe:d5:a1:ba:68:2f:e6:81:99:4b:b0:69:38:4d:36:17:fd:45:bf:b4:4e:9f:a0:53
Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl
Check the revocation status for certificate AVISMD.AVISBUDGET.COM
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for AVISMD.AVISBUDGET.COM
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
AVISMD.AVISBUDGET.COM
Other certificates including the domain name AVISBUDGET.COM
(limited to 100 certificates)
Certificate
The complete raw certificate details for AVISMD.AVISBUDGET.COM in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGzzCCBbegAwIBAgIQDKEBXwCBsexRdI2LJHUOJzANBgkqhkiG9w0BAQsFADBE MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMR4wHAYDVQQDExVE aWdpQ2VydCBHbG9iYWwgQ0EgRzIwHhcNMTkwMTAyMDAwMDAwWhcNMjEwMTE3MTIw MDAwWjCBoDELMAkGA1UEBhMCVVMxEzARBgNVBAgTCk5ldyBKZXJzZXkxEzARBgNV BAcTClBhcnNpcHBhbnkxIDAeBgNVBAoTF0F2aXMgQnVkZ2V0IEdyb3VwLCBJbmMu MSUwIwYDVQQLExxBVklTIElOVEVSQUNUSVZFIFBSRU1JVU0gU1NMMR4wHAYDVQQD ExVBVklTTUQuQVZJU0JVREdFVC5DT00wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCbswWPxBLq0fX0nY6gM4rskT3zatP2tYqaJ9YzRbqwklhOV2xbX8C0 9os/XapHHRXV+u6/bHJ42GgOKIuuMbZiE4x8z5xhrJ/6KtzYYJ2bah22im8zuvNl kxpxy4IZZMz5xpHQLtr7NJCPKDkc31px52mMD6nlEySc1xi/jfF3Mts5BrdpOP7e YnJAEnkh2/3VcXHWdOjH1qaPc0beV9/yATUcibPfkjiew5b9NQtN1NnZ2eSr/W6e AzjPVcgwHf6aRJ7kVzuzxj6v/Ow8lYmidTOtSxJrVcIsJ+reprHI1Rts8yDJ8vpO GuVOFLnCslZL32uz+91BGk99kX/S2U3tAgMBAAGjggNeMIIDWjAfBgNVHSMEGDAW gBQkbist0GqSUVElaQGqmkemiedAIDAdBgNVHQ4EFgQULix3YlEXPID7knVHFs10 XOUtW2AwIAYDVR0RBBkwF4IVQVZJU01ELkFWSVNCVURHRVQuQ09NMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwdwYDVR0fBHAw bjA1oDOgMYYvaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFs Q0FHMi5jcmwwNaAzoDGGL2h0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy dEdsb2JhbENBRzIuY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEBMCowKAYIKwYB BQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQICMHQG CCsGAQUFBwEBBGgwZjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu Y29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln aUNlcnRHbG9iYWxDQUcyLmNydDAJBgNVHRMEAjAAMIIBfQYKKwYBBAHWeQIEAgSC AW0EggFpAWcAdwD2XJQv0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAWgP O6+9AAAEAwBIMEYCIQD8kACsUPFC6Gd/Jg9tx5ysxaq5zi2vXD0cpLtQxP7FPgIh AO/mUrb5dekrFb526u0yEt+V3EHF128DWqJBhkiEzlB5AHUAh3W/51l8+IxDmV+9 827/Vo1HVjb/SrVgwbTq/16ggw8AAAFoDzuwjwAABAMARjBEAiBN0FQ1OwCpVAQq bzngl9JPhOo9/tuSWL9+/5r1L4vvAAIgBARCux7zbxJFGkToPqipxi5PLNup7csW d0qxUohl/rgAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAAAWgP O7ETAAAEAwBGMEQCIH+xstZ9nDqKexX6xFuxzegeABh8pWjk2DgnUTqxpD8/AiBO 0qU+6wYSyXBjsb7dKIZC6+LfU61a3CsweLE3viHywTANBgkqhkiG9w0BAQsFAAOC AQEAEqNb3yq+/ZVQb3hFenrU99MPzhU7vgc0VDKVS2LMxOhM67daznYALcGTr3ox FO6dyn+drcgPrba5utV2PC3IVneGOs25jcFY6qm533sDzmEqhu8QYnqnA23oCM41 ToV1pOY31v7i9n24WG9yxZ4Hw1qCBi64OyqvDTmCbJjo6fjDogt++M8cfR2f2R1f /eQJl9TKIApraTypVkJsq96x89IkwvIdE9aSJomoYZQhmdVrY/D6xluGITZoaaHe 89jto6uNTbvhTMyewaKwGbbThT85fTdHRGP2YR0AApyQilcTkLVdk4F5vgd/13i2 xjb87awplKKPVJM/h03dN6bP1Q== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7MFj8QS6tH19J2OoDOK 7JE982rT9rWKmifWM0W6sJJYTldsW1/AtPaLP12qRx0V1fruv2xyeNhoDiiLrjG2 YhOMfM+cYayf+irc2GCdm2odtopvM7rzZZMaccuCGWTM+caR0C7a+zSQjyg5HN9a cedpjA+p5RMknNcYv43xdzLbOQa3aTj+3mJyQBJ5Idv91XFx1nTox9amj3NG3lff 8gE1HImz35I4nsOW/TULTdTZ2dnkq/1ungM4z1XIMB3+mkSe5Fc7s8Y+r/zsPJWJ onUzrUsSa1XCLCfq3qaxyNUbbPMgyfL6ThrlThS5wrJWS99rs/vdQRpPfZF/0tlN 7QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 16786723552884931878720418295611461159 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-17 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Parsippany' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avis Budget Group, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AVIS INTERACTIVE PREMIUM SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AVISMD.AVISBUDGET.COM' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19655216172508614113638323722586794762112227708588025880096365878971653673524199259451123554810010367614402068785007934597685754477618548122912042776247660720458281564409302477257351025800419350927721958115662662527277198136302405103251466459719088724902265173873280806038837872774737865307549353398778315100279260045133232388269492672857478993039314857820512243357132384335380715242982510421119901055094257756906707189375060809204195652963064100309574519877221548664225250969081334061329923346141111306065511455992152676038506024933796843632514085368704888227833790670306045033336525982034432576555108104142241484269 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2e2c776251173c80fb92754716cd745ce52d5b60 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AVISMD.AVISBUDGET.COM' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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