www.opel.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:7e:6e:1c:03:c4:c1:a7:8c:ad:d2:85:67:9e:96:3e:73:ed was issued on by Let's Encrypt.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.opel.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:7e:6e:1c:03:c4:c1:a7:8c:ad:d2:85:67:9e:96:3e:73:ed
Serial Number (int): 304358796567603247883045897327394036806637
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ae:ea:b0:36:9d:a3:0f:3f:42:38:da:c5:4a:ff:4b:87:1a:ac:46:f0
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 03:27:d0:69:9f:69:e1:fe:6a:55:11:eb:1d:9d:ca:10:72:06:9c:07
Fingerprint (sha256): 13:72:25:9f:89:e4:c6:7f:01:97:59:29:cc:c8:e6:c9:d1:4b:ad:b3:2a:03:fe:12:ae:a0:47:ee:6f:37:18:fb

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.opel.cz

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.opel.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akamai.mmg.opel2.pprod.e-gm.net
bpirapidjn.opel-group.com
de.opel.ch
dealerportal.opel-group.com
fr.opel.be
fr.opel.ch
it.opel.ch
mmg.opel.de
mves-auth.opel.com
mves-vendor.opel.com
mves.opel.com
my.opel.at
my.opel.ba
my.opel.be
my.opel.bg
my.opel.ch
my.opel.com.cy
my.opel.com.mt
my.opel.com.tr
my.opel.cz
my.opel.de
my.opel.dk
my.opel.ee
my.opel.es
my.opel.fi
my.opel.fr
my.opel.gr
my.opel.hr
my.opel.hu
my.opel.ie
my.opel.is
my.opel.it
my.opel.lt
my.opel.lu
my.opel.lv
my.opel.mk
my.opel.nl
my.opel.no
my.opel.pl
my.opel.pt
my.opel.ro
my.opel.rs
my.opel.se
my.opel.si
my.opel.sk
my.vauxhall.co.uk
nl.opel.be
spongepc.opel.com
www.opel-algerie.com
www.opel.at
www.opel.ba
www.opel.be
www.opel.bg
www.opel.ch
www.opel.cl
www.opel.co.za
www.opel.com
www.opel.com.cy
www.opel.com.lb
www.opel.com.mt
www.opel.com.sg
www.opel.com.tr
www.opel.cz
www.opel.de
www.opel.dk
www.opel.ee
www.opel.es
www.opel.fi
www.opel.fr
www.opel.gr
www.opel.hr
www.opel.hu
www.opel.ie
www.opel.it
www.opel.lt
www.opel.lu
www.opel.lv
www.opel.mk
www.opel.nl
www.opel.no
www.opel.pl
www.opel.pt
www.opel.ro
www.opel.rs
www.opel.ru
www.opel.se
www.opel.si
www.opel.sk
www.opelauto.com.mk
www.opelauto.md
www.opelcertifiedusedcars.be
www.opelegypt.net
www.opelukraine.com
www.opelusadoscertificados.pt
www.ua.opelukraine.com
www.vauxhall.co.uk

Other certificates including the domain name opel.cz

(limited to 100 certificates)
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
my.opel.ba
inf.connect.opel.com
my.opel.ba
my.opel.cz
www.buick.com
ppr.connect.opel.com
my.opel.ba
www.opel.cz
my.opel.ba
servis.opel.cz
www.gm.com
my.opel.ba
www.buick.com
pat.connect.opel.com
www.opel.gr
dev-admin.connect.opel.com
dev.connect.opel.com
www.buick.com
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
www.gm.com
www.opel.cz
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
my.opel.ba
www.gm.com
uat.connect.opel.com
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
servis.opel.cz
www.opel.cz
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
www.opel.cz
fix-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
servis.opel.cz
servis.opel.cz
pat-admin.connect.opel.com
www.buick.com
app.vipallinclusive.com
my.opel.ba
app.vipallinclusive.com
www.gm.com
inf-admin.connect.opel.com
ppr-admin.connect.opel.com
www.opel.cz
my.opel.ba
uat-admin.connect.opel.com
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
dev-admin.connect.opel.com
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
inf-admin.connect.opel.com
my.opel.ba
fix-admin.connect.opel.com
pat-admin.connect.opel.com
my.opel.ba
pat.connect.opel.com
connect.opel.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
my.opel.ba
www.opel.cz
ppr.connect.opel.com
dev-admin.connect.opel.com
my.opel.ba

Certificate

The complete raw certificate details for www.opel.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HeZ19ifDMIpe6JPfinr
HnnzbVxJqrOMhPdXDFjwbVCQK8MiNXxIq/ZyCXpFnQZYD41xPAvd8k8Q99u5jNsr
dzXgujCdsMZOaY4/MF7DmcksDHfvyIcvlfbQU9F8BOHx1YQtWGtasuYBVeQ7J45H
3rv3Quj0SARX8QCBg0zbdc/cG4ElJsbo4QNa3ALPvtWGWT1DmuJqDgVe+lOk+AuU
Km2xcNtJfqfH79eYAClgCE9jHoxXQ/OXulcGoUspojgZCdCyvGHNTgEvNwdWcVKj
uILPVVR0jMVwKNfzqsJJHUNda9neq3AXhPP61+q9QqxZXsX5sAFyIfd0TqDWdyHF
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 304358796567603247883045897327394036806637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-18 12:39:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 12:39:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opel.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28336357738862930920707034706576359861935368862631413049698648671942523568510728292605310646152329624815047837488879304351073884332144239915265446017367612192674043498619536286394242827440188922306725047625210367459270664382674570635994303603320343778544168943900911258399633144858180222269257937605608255939646951033978467944304769906492996443702788899807852652669014051403113024630475466722339468793569382451467495572956628901153128902105280488656557840777847093933718746659299544249797328715779219080155586325871521343578921176666360301223828984150515366792343812291015800121389138536401294241623733671550009853413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aeeab0369da30f3f4238dac54aff4b871aac46f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1417 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.mmg.opel2.pprod.e-gm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpirapidjn.opel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerportal.opel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmg.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves-auth.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves-vendor.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spongepc.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel-algerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.lb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelauto.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelauto.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelcertifiedusedcars.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelegypt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelukraine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelusadoscertificados.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ua.opelukraine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000165ece8a6780000040300483046022100c6d0c26617d09a338fb9285e31df32e9f5f38cb05c3830fb2da3a42a5e14ebcb02210091170208191a043065e23c20b5de8084000e913a1fa3a3c201946d81808c2784007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000165ece8a66b0000040300473045022100b4088cea9cfa11e00fa24d554af967258115a58625349f99109a0bd4fd2435dc022029ad5b760ba1c9beccd98b59483807e04e1b63c5fbab659d56c8dd3b8018178a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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