mirror.avis.co.uk

- Avis Budget Services Ltd -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 18:b1:93:0a:ce:d7:28:76:08:78:75:23:ae:78:19:1c was issued on by Entrust, Inc..

With 41 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Avis Budget Services Ltd

Organization: Avis Budget Services Ltd
Locality: Bracknell
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:b1:93:0a:ce:d7:28:76:08:78:75:23:ae:78:19:1c
Serial Number (int): 32823490813306029524536674937401252124
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 28:88:99:15:14:90:6c:c0:9e:28:b9:b6:8b:af:43:a1:11:e1:bc:10
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fe:76:3b:d7:7b:26:8f:2c:a3:52:cc:09:40:de:99:1c:b2:03:6c:03
Fingerprint (sha256): 36:e7:09:aa:48:bf:38:34:af:24:10:73:ed:f9:fa:d0:f1:f8:45:82:bb:3d:f8:d6:7a:60:1f:93:82:0c:5a:ab

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate mirror.avis.co.uk

41

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mirror.avis.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mirror.avis.co.uk
mirror.budgetassets.abgemea.com
mirror.avisassets.abgemea.com
mirror-budgetassets.abgemea.com
mirror-avisassets.abgemea.com
secure-mirror.malocationavis.oui.sncf
secure-mirror.rentacar-iberiaexpress.com
secure-mirror.rentacar-iberia.com
secure-mirror.cars.aerlingus.com
secure-mirror.carhire-ba.com
secure-mirror.budget.fr
secure-mirror.budget.es
secure-mirror.budget.co.uk
secure-mirror.avis.es
secure-mirror.avis.fr
secure-mirror.avis.co.za
secure-mirror.avis.co.uk
mirror.malocationavis.oui.sncf
mirror.rentacar-iberiaexpress.com
mirror.rentacar-iberia.com
mirror.cars.aerlingus.com
mirror.carhire-ba.com
mirror.budget.fr
mirror.budget.es
mirror.budget.co.uk
mirror.avis.es
mirror.avis.fr
mirror.avis.co.za
origin-mirror.malocationavis.oui.sncf
origin-mirror.rentacar-iberiaexpress.com
origin-mirror.rentacar-iberia.com
origin-mirror.cars.aerlingus.com
origin-mirror.carhire-ba.com
origin-mirror.budget.fr
origin-mirror.budget.es
origin-mirror.budget.co.uk
origin-mirror.avis.es
origin-mirror.avis.fr
origin-mirror.avis.co.za
origin-mirror.avis.co.uk
malocationavis-staging.avis.fr

Other certificates including the domain name avis.co.uk

(limited to 100 certificates)
*.avis.fr
mirror.avis.co.uk
www.avis.es
www.avis.fr
mirror.avis.co.uk
www.avis.co.uk
origin-mirror.avis.co.uk
mirror.avis.co.uk
secure.avis.fr
www.avis.co.uk
secureanalytics.avis.co.uk
user.titanurban.com
mirror.avis.co.uk
*.avis.fr
www.services.avis.co.uk
www.avis.fr
pvt.avis.co.uk
*.avis.fr
brownricepuritytest.com
mirror.avis.co.uk
*.avis.co.uk
www.ohiortc.com
www.multiplicationtable.in
sakhishop.in
uat.avis.co.uk
pvt.avis.co.uk
www.xpenzi.com
blog.avis.co.uk
*.avis.fr
mirror.avis.co.uk
secureanalytics.avis.be
secureanalytics.avis.at
www.avis.co.uk
*.avis.co.uk
blog.avis.co.uk
www.avis.co.uk
*.avis.fr
blog.avis.co.uk
blog.avis.co.uk
wedding.milk.sh
avisassets.abgemea.com
www.sach.co.za
reporting.avis.co.uk
mirror.avis.fr
secureanalytics.avis.be
secureanalytics.avis.co.uk
mirror.avis.co.uk
uat.avis.co.uk
qa2.avis.co.uk
*.avis.fr
mirror.avis.de
map.iwuraft.com
www.avis.co.uk
www.avis.de
www.avis.co.uk
reporting.avis.co.uk
reporting.avis.co.uk
mirror.avis.es
*.avis.co.uk
secure-mirror.avis.es
mirror.avis.co.uk
*.avis.fr
secureanalytics.avis.at
mirror.avis.de
*.avis.co.uk
www.avis.co.uk
secure.avis.es
mirror.avis.co.uk
www.services.avis.co.uk
blog.avis.co.uk
secureanalytics.avis.co.uk
reporting.avis.co.uk
secure.avis.de
mirror.avis.co.uk
*.avis.fr
blog.avis.co.uk
mirror.avis.co.uk
mirror.avis.co.uk
*.avis.co.uk
video-makeup.com
mirror.avis.fr
pvt.avis.co.uk
www.avis.es
mirror.avis.co.uk
www.avis.co.uk
pvt.avis.co.uk
origin.avis.ma
mirror.avis.co.uk
blog.avis.co.uk
*.avis.fr
blog.avis.co.uk
www.avisautonoleggio.it
www.avis.de
blog.avis.co.uk
*.avis.fr
secure.avis.nl
mirror.avis.de
*.avis.fr
secure.avis.es
mirror.avis.co.uk

Certificate

The complete raw certificate details for mirror.avis.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ2POMedgmfPzWDWo2KX
cEk7ofMMgIXzY2TzQ6zqE/gkhXocnL2FSYfpKkR6iNZJxpeUC4Y/Cql738+QkYCw
VRi1Nv7X3RUhxT2RwNTBk5R2UPqMgvYbLuOsPbs+1z+puuKTZ+3pmDik+COUd25b
+BJz7H/s3jcNK1rjvHJC8mOeHKMJT/stxSNiYWs7hGM3QSyIzmVoG9wxF+QhpWqy
+etGTJgtB720YpTqwd4oY3cf+BBhL0KwDOGkhYArZvb/Hr6SIUsO1QgO+FpwCfGJ
AaNg7AsD8y/1q/FBx4qR5nARUKjNt432j4xZgjRHZ7kU2RyYFncPc6oDZTY9n2g6
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32823490813306029524536674937401252124
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-04 12:41:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-01 12:41:29 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bracknell'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avis Budget Services Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mirror.avis.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23360772837722219212902334418469289260495279574590183331426468190146643325064022912023611852336243427599808691561869126422877215909383994007137776394790019681507307550445320586897404870570036924366545360543956699016995044991870832430795939287474772775820142200815095972685168342208877332041088112436593741707608829857069102973633005801090420423625280938791771061099419267273954663110399240010161641086547083887314450238530491143988496336296496201263959356941988955926133081711027974021723935561385511943664231217217927098906254369080158641434038117327398135317894188241798005467477838464705241848670752872499346160269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2888991514906cc09e28b9b68baf43a111e1bc10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1148 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.avis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.budgetassets.abgemea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.avisassets.abgemea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror-budgetassets.abgemea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror-avisassets.abgemea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.malocationavis.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.rentacar-iberiaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.rentacar-iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.cars.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.carhire-ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.budget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.budget.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.budget.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.avis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.avis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.avis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure-mirror.avis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.malocationavis.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.rentacar-iberiaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.rentacar-iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.cars.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.carhire-ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.budget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.budget.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.budget.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.avis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.avis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mirror.avis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.malocationavis.oui.sncf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.rentacar-iberiaexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.rentacar-iberia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.cars.aerlingus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.carhire-ba.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.budget.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.budget.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.budget.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.avis.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.avis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.avis.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-mirror.avis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'malocationavis-staging.avis.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002077e41c1f4e08241745279c1242ee9baf63befe3537b4477d674d8c28088487c1c7655b4bb1c31f75ef8e0e5403b50f94174c9c1c8564b11827da9195b64d4e6fa75ace82f7b5e4bfa59e5b4a96bd2875390615f6b7f07b305d710941b79bf9d491ebb3224d80c9dae2035681c81bcfc06adaf480b9b410654d55edce4a524e2eea10ddef56783487c77b67f009e5eba203fffc81f9cd3e7053d06ccae9c242c9a7c97153a02072de174933448b1bd55b5c3164d9f873db66565379165d76f9cb856f7659d118ecee70613dac9207513ed62cd72d6eb426d86a54f62c7d4f284878abb965dffe338dd78f2dce9faa6964fce61514edd8a0bdfb02e1ef6a8d71