click.e.avis.co.nz

- Avis Rent a Car Limited -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 08:18:d0:30:34:33:5a:f0:ba:f8:b4:76:e5:ab:18:14 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Avis Rent a Car Limited

Organization: Avis Rent a Car Limited
State / Province: Berkshire
Locality: Ellerslie, Auckland
Country: NZ

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:18:d0:30:34:33:5a:f0:ba:f8:b4:76:e5:ab:18:14
Serial Number (int): 10762661651188828259636616240512571412
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:c4:c5:7d:e8:fc:a0:04:76:cf:46:39:57:9e:32:ca:a2:cc:9c:d5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 91:20:88:dd:a2:9b:c3:e2:21:3a:1f:46:fd:0d:77:3f:c7:e3:56:42
Fingerprint (sha256): 1f:d3:61:91:58:17:df:85:b7:d6:f4:07:f7:91:db:65:a7:07:1e:2f:76:cd:3d:90:82:03:4c:e0:80:dc:3e:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for certificate click.e.avis.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for click.e.avis.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

click.e.avis.co.nz

Other certificates including the domain name avis.co.nz

(limited to 100 certificates)
mqa.avis.co.nz
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudgetgroup.com
ecommisc.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
*.avis.co.nz
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
click.e.avis.co.nz
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
pages.e.avis.co.nz
ecommisc.avisbudget.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.carrental.com
www.carrental.com
www.avisbudgetgroup.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
www.avisbudget.com
click.e.avis.co.nz
www.avisbudget.com
www.avisbudget.com
ecomaws.avisbudget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudgetgroup.com
mqa.avis.co.nz
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudget.com
*.avis.co.nz
www.avisbudgetgroup.com
ecomaws.avisbudget.com
www.avisbudget.com
www.carrental.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
view.e.avis.co.nz
www.avisbudget.com
www.avisbudget.com
www.carrental.com
www.avisbudget.com
www.avisbudget.com
akamai-san9.exacttarget.com
www.avisbudget.com
www.avisbudgetgroup.com
akamai-san9.exacttarget.com
www.avis.co.nz
akamai-san9.exacttarget.com
www.avis.co.nz
qa.avis.co.nz
ecommisc.avisbudget.com
www.avisbudget.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com
www.avisbudgetgroup.com

Certificate

The complete raw certificate details for click.e.avis.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtE6s1rq1iuADNvy6f8F3
70ZsMZLCK3xQBr4l04X1SDTL8QxmqwuBaUplCsY7r1XLItkUICB4bdSTdg43u3i0
p3UUKNjpEFfg0kWAZ/qmwZk3aV+KiL5V10CeAF1QznGf7w4WVuyZQ38aisFGKClR
xA6gx1LEpIqGDl4gBDSyG0vSBdWe7Cgp/bB4bXwfh9ZE3YlpCR9XoVwjlPN3OoUQ
sTY3gWtLUyVUvB+aoopFjbY5QFse19q32lNxsi8IYfsbgov4qy8PlUOcPfJEQYNW
ygJueCZ9qBlZulPJYqpvOuiZDWIFIh2z5Yd9YcRICrTlT17ZI4ilCaq9etJWctVg
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10762661651188828259636616240512571412
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Berkshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ellerslie, Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avis Rent a Car Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'click.e.avis.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22761691057052734573596681677529006992903999285680071275755325110957246127257455334824668796379115486117015207896956085621424043409049933010397418788663818976088271930064929222067013847963186305020476058853026147251554931546488089384006868651628233339810771882510739376620218557085890131446927429975017217542398596857293827042093407952195394847459054891255833960161964419063588921262827064834836415862020356216813831903687359021993377907314031494789619759483715080243629674484162516418855065240214998664624955765250815123878624577404728954845540113992803554548513052032093083339087792485576214733709239924293058781363
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5bc4c57de8fca00476cf4639579e32caa2cc9cd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'click.e.avis.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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