guardianvoice.onstar.com

Issued by R3

About this certificate

This digital certificate with serial number 03:b2:01:74:d7:61:1a:0a:fd:fa:97:86:cc:de:ff:a0:fb:2b was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=guardianvoice.onstar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:01:74:d7:61:1a:0a:fd:fa:97:86:cc:de:ff:a0:fb:2b
Serial Number (int): 321909055010050417840117849812450955819819
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 34:65:05:c2:86:be:e6:36:2c:7d:77:dd:d0:8b:a8:cc:45:f0:ca:52
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:79:d6:be:0e:9f:e5:bc:32:c0:d2:fe:47:3e:aa:e7:1d:10:3d:b7
Fingerprint (sha256): 06:60:e1:5c:70:fc:23:a7:65:2b:8e:f2:36:0b:e2:ee:3a:89:0b:75:45:22:71:cb:01:b4:ac:4f:43:24:c2:e1

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate guardianvoice.onstar.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for guardianvoice.onstar.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

guardianvoice.onstar.com

Other certificates including the domain name onstar.com

(limited to 100 certificates)
secure06.stage.lithium.com
mi.onstar.com
mi.onstar.com
www.cadillac.com
secure06.stage.lithium.com
admin2.stg.onstar.com
delivery.onstar.com
gsp.eur.onstar.com
www.onstar.com
view.e.onstar.com
brand.onstar.com
akamai-san15.exacttarget.com
vnm-sfobms-idta-epgw.onstar.com
www.cadillac.com
www.gm.com
secure03.lithium.com
www.cadillac.com
vapi-l7g-lmrxezlc.onstar.gm.com
admin.onstar.com
*.gm.com
secure06.stage.lithium.com
brand.onstar.com
secure03.lithium.com
guardianvoice.onstar.com
api.eur.onstar.com
click.e.onstar.com
brand.onstar.com
my.gm.com
s.onstar.com
a.onstar.com
pub-stage-cei.onstar.com
secure06.stage.lithium.com
www.onstar.com
dealer.gm.com
www.onstar.com
outlook.gm.com
s.onstar.com
view.atyourservice.onstar.com
brand.onstar.com
b2b.onstar.com
secure06.stage.lithium.com
mi.onstar.com
click.atyourservice.onstar.com
www.onstar.com
www.onstar.com
www.gm.com
secure03.lithium.com
s.onstar.com
api.eur.onstar.com
vehicle-pp2.api.eur.onstar.com
admin.eu.onstar.com
sso.onstar.com
www.gmcarabia.com
click.atyourservice.onstar.com
akamai-san15.exacttarget.com
s.onstar.com
www.onstar.com
osc1x-pub-onstar-prdmx.gm.com
secure06.stage.lithium.com
secure06.stage.lithium.com
osc1x-pub-onstar-prdwx.gm.com
s.onstar.com
www.cadillac.com
training.onstar.com
sts.onstar.com
sts.onstar.com
tib.onstar.com
www.gm.com
secure03.lithium.com
*.gm.com
secure06.stage.lithium.com
dcwxpvmcei005.edc.nam.gm.com
training.onstar.com
gm.com
osc1x-pub-onstar-prdmx.gm.com
training.onstar.com
secure06.stage.lithium.com
click.atyourservice.onstar.com
secure06.stage.lithium.com
secure03.lithium.com
secure03.lithium.com
outlook.gm.com
brand.onstar.com
secure03.lithium.com
www.cadillac.com
onstar.com
osc1x-pub-onstar-prdmx.gm.com
tib.onstar.com
secure03.lithium.com
gm.com
*.gm.com
gsp.eur.onstar.com
pub-prod-cei-onstar-prdw.gm.com
waplb.gm.com
secure06.stage.lithium.com
training.onstar.com
*.gm.com
www.cadillac.com
www.gmcarabia.com
s.onstar.com

Certificate

The complete raw certificate details for guardianvoice.onstar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZL+t0GT4pv0WDkDyd4y
/E6UZ07t7jneWqLvcg9kJfeJEXI08h66Ha1Nmx81nnR+l3f8BiqpLW4Ey6CLVDmf
TXZvA/aXSr65Pu+hMglqh9aQ5Kg86fZUb/txxC586q4bte3zDUnPlYUp+KfIdsW5
+DNcTpooyOinoQpe+MQ4GtcMQ9cEy/aD8DD/738qdlfFUUeVejMDj32KUPP3/GFo
Obk980p9rNugfCWM7cnRfnPbwqFneRD7dg5Fo6NbtztsgZQdzDj/qnA6nIFm14A6
jl9HpUN1z7oFd/oQ8ZvUVIJyn6MGAXZVdvR66Yi6MQSkVUvjy5WgkpaGrHpHvzGg
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 321909055010050417840117849812450955819819
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-28 15:11:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-26 15:11:46 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'guardianvoice.onstar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21911712687211251479992086862997650703272059575593689686419062865778074685044612270830179815581661655818549109289128076404694411176989942046726793469428756523397177812786114195777907744412709983068449849713327769395373871738120418890973784170204508360582678341959461167919101378613470691302663257224602833441900174112244124147990304859406727415340377646536231124538965824959819558081302906658918227249388081408098174385235023028643872987413833959136010856311927075231205728236810391551924864382308742997767431157405896798099182641696302236741461047010351404986581181898086731649856146233421852615533403717531885215991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							346505c286bee6362c7d77ddd08ba8cc45f0ca52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'guardianvoice.onstar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000182459411620000040300483046022100b1cbe183a4fb40f971b045b1f362d5b7b3de6b7a14d301658f0270bca5650aef022100d94690bf7f5932ba2e8fecab0c5cbbf5599ed89317b888901f27076e9d16dfe600760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001824594113a000004030047304502203dc194b16eeabccc7951f279fcbfa1c7a9e92c5d3f783380db78d9bd62bfe8d4022100b7fee8c8f496c961ab55d47f03e6e5b616bd29888133e03e152a2abcd7799201
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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