streaming.vn.teslamotors.com

- Tesla, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:89:eb:85:9d:74:63:1f:8e:14:45:17:a8:25:c3:27 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tesla, Inc.

Organization: Tesla, Inc.
State / Province: California
Locality: Palo Alto
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:89:eb:85:9d:74:63:1f:8e:14:45:17:a8:25:c3:27
Serial Number (int): 8691489596661089195633274878939218727
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b7:d7:5e:44:3e:7a:d4:47:c2:02:e2:a3:06:1e:60:1a:94:8e:3c:40
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ff:c3:0f:3b:d2:18:ee:f4:f0:5f:0b:2a:db:7c:17:7b:91:72:13:5f
Fingerprint (sha256): 07:c4:9d:7a:e2:35:76:9d:71:b2:9c:ca:da:9a:dd:34:ec:da:bb:e7:4d:1d:51:64:17:3b:39:39:f5:18:4a:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate streaming.vn.teslamotors.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for streaming.vn.teslamotors.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

streaming.vn.teslamotors.com

Other certificates including the domain name teslamotors.com

(limited to 100 certificates)
vehicle-files.teslamotors.com
*.teslamotors.com
toolbox.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
sp.teslamotors.com
akamaisecure.qualtrics.com
VUS-W10TAX-002.teslamotors.com
vehicle-files.teslamotors.com
bitlocker.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
*.teslamotors.com
imail.teslamotors.com
vehicle-files.teslamotors.com
test01.clearpass.teslamotors.com
test-ap.clearpass.teslamotors.com
*.teslamotors.com
ilt.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
cnvpn.teslamotors.com
vehicle-files.teslamotors.com
www.teslamotors.com
test01.clearpass.teslamotors.com
plcvpn.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
streaming.vn.teslamotors.com
akamaisecure.qualtrics.com
*.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
testcert1.teslamotors.com
*.artifactory.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
shop.eu.teslamotors.com
xmail.teslamotors.com
*.artifactory.teslamotors.com
*.teslamotors.com
*.teslamotors.com
testcert3.teslamotors.com
signaling.dev.teslamotors.com
*.teslamotors.com
www.teslamotors.com
www.teslamotors.com
vehicle-files.teslamotors.com
neovi3.teslamotors.com
*.teslamotors.com
*.testcert2.teslamotors.com
jss-retail.teslamotors.com
*.teslamotors.com
cnvpn.teslamotors.com
sso-dec.teslamotors.com
akamaisecure.qualtrics.com
fleet-api.teslamotors.com
vehicle-files.teslamotors.com
vehicle-files.teslamotors.com
*.testcert2.teslamotors.com
vehicle-files.teslamotors.com
neovi-vpn.teslamotors.com
test-ap.clearpass.teslamotors.com
shop.eu.teslamotors.com
sjc02p1purfs103.teslamotors.com
vehicle-files.teslamotors.com
ukmail.teslamotors.com
*.dev.teslamotors.com
*.teslamotors.com
eumobility.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
epc.teslamotors.com
owner-api.teslamotors.com
vehicle-files.teslamotors.com
securemail.teslamotors.com
*.teslamotors.com
vpn.teslamotors.com
vehicle-files.teslamotors.com
*.teslamotors.com
cn.auth.teslamotors.com
owner-api.teslamotors.com
suppliers.teslamotors.com
*.teslamotors.com
us.auth.teslamotors.com
*.teslamotors.com
vehicle-files.teslamotors.com
sjc18-rpi-wlc-lab.teslamotors.com
mytadmin.teslamotors.com
sjc02p1purfs01.teslamotors.com
vehicle-files.teslamotors.com
sjc04p2autdb2.teslamotors.com
*.teslamotors.com
tel.vn.teslamotors.com
origin-www45.teslamotors.com
test01.clearpass.teslamotors.com

Certificate

The complete raw certificate details for streaming.vn.teslamotors.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx3zmc6o+r7sBRGycLEBP
bnMdjnUeHFMu5K6MaWOAOHW/2WBSgfB6KIddmqgQPthNzZv9rsJfUB+ks8i1KleJ
7wr772+8UPs0jnqbelgS+zagujsFG2iCNGW3XhPnOxk0JlE6nX7fpEgfoxRdYUxt
M5kVaJJqlW9KKTf4tGFWu46zVl7MFGB/WUlTCCIYb+h+reORQOqRbX2mIP4/TqHG
q7MJNshXymumyPJzMIWMHAOo/PRXbQSbZrDpydcCwDIYbOhURPAEhUPv4+ljXyju
FgqrF89NFTjWnZafebb1HIdRrUgOs+19JAqugnfQQjUdmDdNdbvUMZtkm4rPi3VI
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8691489596661089195633274878939218727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Palo Alto'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesla, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'streaming.vn.teslamotors.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25183013273565664274998671545636251417741425784576421174184037995932879692019866186137158861321080324189502235619099962521164839654824160723831195882929502631475335322374404734626636426852687907800080426857178945768626125764912003459576842807404982500777390106526919430641091022019862245071830531152179541012540327382345150446493381752118267540168387678481643243529737175191576537047339802800592043367780095591139406734044519492714208775389577381109951644095746128593316179451389701694761059399420619295435565774461036682071969739908172317292076871838593346514981512311311537052939708549174914951642143934550279276559
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b7d75e443e7ad447c202e2a3061e601a948e3c40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'streaming.vn.teslamotors.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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