safercar.gov

- National Highway Traffic Safety Administration -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:55:a7:0b:e7:b2:c5:f1:e7:80:d5:47:c5:17:07:10 was issued on by DigiCert Inc.

With 65 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

National Highway Traffic Safety Administration

Organization: National Highway Traffic Safety Administration
State / Province: District of Columbia
Locality: Washington
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:55:a7:0b:e7:b2:c5:f1:e7:80:d5:47:c5:17:07:10
Serial Number (int): 8420101313305713904882576746251486992
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3f:11:3a:39:c2:d7:97:7e:43:45:1b:e2:a6:d3:c4:47:87:e1:3f:7c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ec:b8:e8:86:2b:8a:b3:f1:25:8e:61:93:72:3b:86:21:70:ba:86:b0
Fingerprint (sha256): 56:8c:71:33:f8:48:38:b0:9e:88:04:ec:75:95:42:83:f4:b1:f7:e4:de:95:d1:02:c3:cb:0b:14:0d:13:df:5d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate safercar.gov

65

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for safercar.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

safercar.gov
api.nhtsa.gov
cbi-stage.nhtsa.dot.gov
cbi.nhtsa.dot.gov
cbiuser-stage.nhtsa.dot.gov
cbiuser.nhtsa.dot.gov
cbiuserapi-stage.nhtsa.dot.gov
cbiuserapi.nhtsa.dot.gov
cms.nhtsa.dot.gov
cms.tsm.nhtsa.dot.gov
crashviewer.nhtsa.dot.gov
dredata.nhtsa.gov
gts.nhtsa.gov
gtstest.nhtsa.gov
hvedata.nhtsa.gov
icsw.nhtsa.gov
isearch.nhtsa.gov
legacy-dredata.nhtsa.gov
mcp.nhtsa.gov
mcs.nhtsa.gov
ncap-api-stage.nhtsa.dot.gov
ncap-stage.nhtsa.dot.gov
nrd-portal.nhtsa.dot.gov
nrd-stage-portal.nhtsa.dot.gov
nrd-static.nhtsa.dot.gov
nrd.api.nhtsa.dot.gov
nstrc.nhtsa.gov
one.nhtsa.gov
ovsc-stage.api.nhtsa.dot.gov
ovsc.api.nhtsa.dot.gov
preprod-api.nhtsa.gov
preprod-static.nhtsa.gov
resourcecenter.911.gov
sparks-stage.nhtsa.dot.gov
sparks.nhtsa.dot.gov
stage-api.nhtsa.gov
stage-nrd-static.nhtsa.dot.gov
stage-nrd.api.nhtsa.dot.gov
stage-static.nhtsa.gov
static.nhtsa.gov
stg-api.nhtsa.gov
stg-dredata.nhtsa.gov
stg-nstrc.nhtsa.gov
stnw.nhtsa.gov
vinrcl.safercar.gov
vista-api-stage.nhtsa.dot.gov
vista-api.nhtsa.dot.gov
vpic-stage.nhtsa.dot.gov
vpic.nhtsa.dot.gov
vpicpub.nhtsa.gov
vpicpubportal.nhtsa.gov
webapi.nhtsa.gov
www-esv.nhtsa.dot.gov
www-fars.nhtsa.dot.gov
www-nrd.nhtsa.dot.gov
www-odi.nhtsa.dot.gov
www.911.gov
www.distracteddriving.gov
www.distraction.gov
www.ems.gov
www.nhtsa.dot.gov
www.nhtsa.gov
www.safercar.gov
www.safertruck.gov
www.trafficsafetymarketing.gov

Other certificates including the domain name safercar.gov

(limited to 100 certificates)

Certificate

The complete raw certificate details for safercar.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIMLDCCCxSgAwIBAgIQBlWnC+eyxfHngNVHxRcHEDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzEyMjgwMDAwMDBaFw0yNDA5MTcyMzU5NTlaMIGRMQswCQYDVQQGEwJVUzEd
MBsGA1UECBMURGlzdHJpY3Qgb2YgQ29sdW1iaWExEzARBgNVBAcTCldhc2hpbmd0
b24xNzA1BgNVBAoTLk5hdGlvbmFsIEhpZ2h3YXkgVHJhZmZpYyBTYWZldHkgQWRt
aW5pc3RyYXRpb24xFTATBgNVBAMTDHNhZmVyY2FyLmdvdjCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANDpJVo3Vvr7ymqrlWuv5OlvkN8xSIhwYH1QR/jV
NQ3RSOrsJH5J6qDXkssngNbkwLXjWa1SDvqKjxryCJ4qq5Bmem5l8NL6x5MeZPU6
yyMf4NcbcjV8mGDjbh6oQ9xt9zD2ikrfKBW7K8CrgiljFisOPhken5ZntZmITVfU
97jJimN93Zv2h6X/zSx/Ke/gLeHrUEv6xaB6JsFcXVrWj6GHLjFn5DEgFiXYv+pm
CHtWg7UFv/NRp9dsGjgD/vfMXeXK0xqmQIlRqacRYptsY9eSFT1s4dNQfuBOih9c
2KqHEsWz09bQiEXwmjcgilnEffjzk2pvJo9c/wbaeruJc3cCAwEAAaOCCLAwggis
MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBQ/ETo5
wteXfkNFG+Km08RHh+E/fDCCBbMGA1UdEQSCBaowggWmggxzYWZlcmNhci5nb3aC
DWFwaS5uaHRzYS5nb3aCF2NiaS1zdGFnZS5uaHRzYS5kb3QuZ292ghFjYmkubmh0
c2EuZG90LmdvdoIbY2JpdXNlci1zdGFnZS5uaHRzYS5kb3QuZ292ghVjYml1c2Vy
Lm5odHNhLmRvdC5nb3aCHmNiaXVzZXJhcGktc3RhZ2Uubmh0c2EuZG90LmdvdoIY
Y2JpdXNlcmFwaS5uaHRzYS5kb3QuZ292ghFjbXMubmh0c2EuZG90LmdvdoIVY21z
LnRzbS5uaHRzYS5kb3QuZ292ghljcmFzaHZpZXdlci5uaHRzYS5kb3QuZ292ghFk
cmVkYXRhLm5odHNhLmdvdoINZ3RzLm5odHNhLmdvdoIRZ3RzdGVzdC5uaHRzYS5n
b3aCEWh2ZWRhdGEubmh0c2EuZ292gg5pY3N3Lm5odHNhLmdvdoIRaXNlYXJjaC5u
aHRzYS5nb3aCGGxlZ2FjeS1kcmVkYXRhLm5odHNhLmdvdoINbWNwLm5odHNhLmdv
doINbWNzLm5odHNhLmdvdoIcbmNhcC1hcGktc3RhZ2Uubmh0c2EuZG90LmdvdoIY
bmNhcC1zdGFnZS5uaHRzYS5kb3QuZ292ghhucmQtcG9ydGFsLm5odHNhLmRvdC5n
b3aCHm5yZC1zdGFnZS1wb3J0YWwubmh0c2EuZG90LmdvdoIYbnJkLXN0YXRpYy5u
aHRzYS5kb3QuZ292ghVucmQuYXBpLm5odHNhLmRvdC5nb3aCD25zdHJjLm5odHNh
LmdvdoINb25lLm5odHNhLmdvdoIcb3ZzYy1zdGFnZS5hcGkubmh0c2EuZG90Lmdv
doIWb3ZzYy5hcGkubmh0c2EuZG90LmdvdoIVcHJlcHJvZC1hcGkubmh0c2EuZ292
ghhwcmVwcm9kLXN0YXRpYy5uaHRzYS5nb3aCFnJlc291cmNlY2VudGVyLjkxMS5n
b3aCGnNwYXJrcy1zdGFnZS5uaHRzYS5kb3QuZ292ghRzcGFya3Mubmh0c2EuZG90
LmdvdoITc3RhZ2UtYXBpLm5odHNhLmdvdoIec3RhZ2UtbnJkLXN0YXRpYy5uaHRz
YS5kb3QuZ292ghtzdGFnZS1ucmQuYXBpLm5odHNhLmRvdC5nb3aCFnN0YWdlLXN0
YXRpYy5uaHRzYS5nb3aCEHN0YXRpYy5uaHRzYS5nb3aCEXN0Zy1hcGkubmh0c2Eu
Z292ghVzdGctZHJlZGF0YS5uaHRzYS5nb3aCE3N0Zy1uc3RyYy5uaHRzYS5nb3aC
DnN0bncubmh0c2EuZ292ghN2aW5yY2wuc2FmZXJjYXIuZ292gh12aXN0YS1hcGkt
c3RhZ2Uubmh0c2EuZG90LmdvdoIXdmlzdGEtYXBpLm5odHNhLmRvdC5nb3aCGHZw
aWMtc3RhZ2Uubmh0c2EuZG90LmdvdoISdnBpYy5uaHRzYS5kb3QuZ292ghF2cGlj
cHViLm5odHNhLmdvdoIXdnBpY3B1YnBvcnRhbC5uaHRzYS5nb3aCEHdlYmFwaS5u
aHRzYS5nb3aCFXd3dy1lc3Yubmh0c2EuZG90LmdvdoIWd3d3LWZhcnMubmh0c2Eu
ZG90LmdvdoIVd3d3LW5yZC5uaHRzYS5kb3QuZ292ghV3d3ctb2RpLm5odHNhLmRv
dC5nb3aCC3d3dy45MTEuZ292ghl3d3cuZGlzdHJhY3RlZGRyaXZpbmcuZ292ghN3
d3cuZGlzdHJhY3Rpb24uZ292ggt3d3cuZW1zLmdvdoIRd3d3Lm5odHNhLmRvdC5n
b3aCDXd3dy5uaHRzYS5nb3aCEHd3dy5zYWZlcmNhci5nb3aCEnd3dy5zYWZlcnRy
dWNrLmdvdoIed3d3LnRyYWZmaWNzYWZldHltYXJrZXRpbmcuZ292MD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3QuY29t
L0dlb1RydXN0UlNBQ0EyMDE4LmNybDB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUH
MAGGGmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRw
Oi8vY2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAwG
A1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjLIRiF8AAAQDAEcwRQIhAPRznshH
LZoGmzpwnaCX+ohVS0lPJFTCoXta8rfcN4PaAiB1IKQ8Uf8oMFzSfRuBwxrioTFx
OpS+Ogdfs464sl4jDgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz
AAABjLIRiE0AAAQDAEcwRQIgK9/kZt4NnP5gQI/M4wlYBH2BfKN1yW09izfTrqyF
9B8CIQC8AGiqPsvXTpgoSgvEdwOCuaX8bnfU6KxlM6PdRHLuAwB1ANq2v2s/tbYi
n5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjLIRiE8AAAQDAEYwRAIgb1plCIgU
0yckIZLRcAsSpUJtQowtcvNr6Kr5+qPdjSQCIBN/V9rg+smpb+muBh7KMMENujHI
CsDmlXFLI5YAfO3rMA0GCSqGSIb3DQEBCwUAA4IBAQAJbwnE2re8Pki9iqZmZ15G
HpiFys+d1s3BAIA66tOcDpuW7nWgCbVAGOiwymMroelmEMknyWGq07x/ivLDz189
DWCGPIKk0Co/kOzbj1Y4AVl/JxHlhpgs86fs4d9Y+ENo6WlO/ki4akQjIc31t0Rk
dJ+PbzIL4o0kcxwZzc4nILizkZy8jqnGbo80qaCFU686ni6Q/dfcNCVdsOnj3NqX
trB/67uLXsrF5CmUZzy3MDZUsRQXx8Rs2t3astFK0E3OkQXyC3KTHWImqgFTq32o
owGfRSp+BDILCxee13MNIxl3zxlrb8OVBtDMndP2SoymoiENMvJakOr/mDCVKq2C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0OklWjdW+vvKaquVa6/k
6W+Q3zFIiHBgfVBH+NU1DdFI6uwkfknqoNeSyyeA1uTAteNZrVIO+oqPGvIIniqr
kGZ6bmXw0vrHkx5k9TrLIx/g1xtyNXyYYONuHqhD3G33MPaKSt8oFbsrwKuCKWMW
Kw4+GR6flme1mYhNV9T3uMmKY33dm/aHpf/NLH8p7+At4etQS/rFoHomwVxdWtaP
oYcuMWfkMSAWJdi/6mYIe1aDtQW/81Gn12waOAP+98xd5crTGqZAiVGppxFim2xj
15IVPWzh01B+4E6KH1zYqocSxbPT1tCIRfCaNyCKWcR9+POTam8mj1z/Btp6u4lz
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8420101313305713904882576746251486992
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'National Highway Traffic Safety Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'safercar.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26372535965031733571860024548426792433814421474583765520084167354295137034566594410673445416614614597988171637114193436678723640452957323428262587585128116146860480367398141758312893208909143335055426139878790440519722664385168157990553204791559906875531629385204215018444358482018812307283986636217746008591699237929120343237468258731221673846180084696388732377568241407669446691871102911515064345298294023965464103165179025398809030676978584239516541565051396754033238081510225886251848277081589390023455049315072488009102774154529026910829639572114046808367149886925085437934582458875827003850499120324879585997687
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f113a39c2d7977e43451be2a6d3c44787e13f7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1450 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'safercar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbi-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbi.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiuser-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiuser.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiuserapi-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbiuserapi.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.tsm.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crashviewer.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dredata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gts.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gtstest.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hvedata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icsw.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isearch.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy-dredata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcp.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcs.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncap-api-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ncap-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrd-portal.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrd-stage-portal.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrd-static.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrd.api.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nstrc.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovsc-stage.api.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ovsc.api.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-api.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-static.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'resourcecenter.911.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparks-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sparks.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-api.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-nrd-static.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-nrd.api.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-static.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-api.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-dredata.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-nstrc.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stnw.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vinrcl.safercar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vista-api-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vista-api.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpic-stage.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpic.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpicpub.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpicpubportal.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapi.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-esv.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-fars.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-nrd.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-odi.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.911.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distracteddriving.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.distraction.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ems.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhtsa.dot.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nhtsa.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safercar.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.safertruck.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.trafficsafetymarketing.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018cb211885f0000040300473045022100f4739ec8472d9a069b3a709da097fa88554b494f2454c2a17b5af2b7dc3783da02207520a43c51ff28305cd27d1b81c31ae2a131713a94be3a075fb38eb8b25e230e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018cb211884d000004030047304502202bdfe466de0d9cfe60408fcce30958047d817ca375c96d3d8b37d3aeac85f41f022100bc0068aa3ecbd74e98284a0bc4770382b9a5fc6e77d4e8ac6533a3dd4472ee03007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018cb211884f000004030046304402206f5a65088814d327242192d1700b12a5426d428c2d72f36be8aaf9faa3dd8d240220137f57dae0fac9a96fe9ae061eca30c10dba31c80ac0e695714b2396007cedeb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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