avis.nl

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 01:e7:6b:ea:05:e4:fc:21:1f:cd:7b:7c:e2:88:99:6e was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=avis.nl

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:e7:6b:ea:05:e4:fc:21:1f:cd:7b:7c:e2:88:99:6e
Serial Number (int): 2530837329148330905051432897676351854
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: d4:ca:77:ae:f8:7f:4f:45:55:5b:4b:fb:97:a7:6e:dd:bb:c7:6d:62
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): aa:89:d7:e6:2a:b4:25:47:b5:45:cc:c1:fc:ba:1a:70:5e:54:85:14
Fingerprint (sha256): 23:77:5d:d1:3c:5e:ff:4b:8a:01:bd:9e:3c:3d:f2:7d:a8:05:00:46:d6:fe:15:c6:f6:6f:19:6a:63:56:9e:17

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate avis.nl

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avis.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avis.nl

Other certificates including the domain name avis.nl

(limited to 100 certificates)
*.avis.fr
avis.nl
mirror.avis.co.uk
www.avis.es
www.avis.fr
mirror.avis.co.uk
origin-mirror.avis.co.uk
mirror.avis.co.uk
secure.avis.fr
avis.nl
*.avis.fr
www.avis.fr
*.avis.fr
avis.nl
avis.nl
nl.avis.nl
mirror.avis.co.uk
www.avis.nl
*.avis.co.uk
uat.avis.co.uk
*.avis.fr
secureanalytics.avis.be
secureanalytics.avis.at
secureanalytics.avis.nl
*.avis.co.uk
*.avis.fr
reporting.avis.nl
nl.avis.nl
avisassets.abgemea.com
mirror.avis.fr
secureanalytics.avis.be
secureanalytics.avis.co.uk
mirror.avis.co.uk
uat.avis.co.uk
*.avis.fr
mirror.avis.de
www.avis.de
mirror.avis.es
*.avis.co.uk
secure-mirror.avis.es
mirror.avis.co.uk
*.avis.fr
secureanalytics.avis.at
mirror.avis.de
reporting.avis.nl
*.avis.co.uk
secure.avis.es
secure.avis.de
*.avis.fr
mirror.avis.co.uk
mirror.avis.co.uk
*.avis.co.uk
mirror.avis.fr
www.avis.es
nl.avis.nl
secureanalytics.avis.nl
reporting.avis.nl
reporting.avis.nl
origin.avis.ma
avis.nl
mirror.avis.co.uk
*.avis.fr
www.avisautonoleggio.it
www.avis.de
*.avis.fr
secure.avis.nl
mirror.avis.de
*.avis.fr
secure.avis.es
mirror.avis.co.uk
*.avis.fr
*.avis.fr
mirror.avis.co.uk
*.avis.fr
www.avis.nl
*.avis.fr
mirror.avis.co.uk
mirror.avis.co.uk
*.avis.fr
reporting.avis.nl
mirror.avis.fr
secureanalytics.avis.at
mirror.avis.co.uk
secure.avis.fr
mirror.avis.co.uk
origin.avis.fr
www.avis.nl
*.avis.fr
www.avis.co.uk
secure.avis.nl

Certificate

The complete raw certificate details for avis.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7jgNI5kQmLEkyMdueINL
r8hAPJleM8LJd+2TiVQbMwwH2FGuVRdqFpNtmYvLTIHIRXrIeZMIcPok3NuWWblC
/CkG0S+8aE6ny1m899K1BdDjtvn3nD/lNF3qDuYyA1LEh1vy2oPRyx89odeSBKn3
KQja8IysEQv2F2wIgfL20HtEJVIoq8Vv4NsqdHPBu1J853/cfvS3ZDw2fg40zG92
vS6jdzMunLGHE9my4JNQaY9kHh15P7ErO7NhtzLwI/eql0kDyCyeFUoeey8pAzq3
4rUstXsQ3WgLSTLG+RgM/SRtfrnNZzdMwlCa2u12IzgursdtyTnl6W8MjU+OVYyx
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2530837329148330905051432897676351854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avis.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30072356520153479679945782308113612481777020143789922692945384357538443678065013852498524467270682694825599982397487284142369464672797944166970781934675755348790554928138666777057347309580001050924572365359715893490897884699741378473180499027136098237029231564861200363208254405486873093649635446852292714472960109331083204119583076124108358941307904005842736807944875673968720306043716657891469904927986242026842136574913829547673552882174923521190207773145635389154089159744687567330511989546107433356824089334249766617097684100935264770858932637082505940544172540582406951704628106581187205328312379078926463185309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4ca77aef87f4f45555b4bfb97a76eddbbc76d62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e364b8aa4000004030046304402203f90fa6e50b92a82d6340609396c13d561eb560a228e8dbbf5710530d5ab8ec8022039b64384d55f9db3b3288ca9aa130685e00b740f7e7899040584253a0878bc5000750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018e364b8a1600000403004630440220186cc81df64187bb06e06d4609fd68f938b1f56842f1a563626992a66be124bd0220120613568b405d23b424e48dc42fd4edfc71c33c7a0d6774370d0f618ad54636007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e364b8a140000040300473045022100a7036b63de91a366212a2a7098553922b176de2d30189111f4f52271969c92f502202b138b8bebefbf62a11a0065b4b3e4ca0fa144695cb692dbecc6d47367143db0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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