stage1-www.opel.de

Issued by R3

About this certificate

This digital certificate with serial number 03:fc:6c:57:b5:bb:da:11:84:a7:2d:9b:5f:65:8d:d6:d9:0e was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage1-www.opel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:fc:6c:57:b5:bb:da:11:84:a7:2d:9b:5f:65:8d:d6:d9:0e
Serial Number (int): 347232026298727989738355425758563205044494
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ed:b2:00:5d:9b:43:8d:6e:aa:62:fc:ae:7a:fd:5b:8b:4d:0b:61:63
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 89:32:89:e5:f6:54:83:a8:6b:b6:bb:1c:3a:a3:23:20:7b:cd:62:56
Fingerprint (sha256): 14:f0:bf:02:f0:fe:68:07:d1:91:8c:91:84:ad:f3:c8:ee:de:10:a2:65:ed:de:16:cf:78:3d:d7:45:c2:77:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stage1-www.opel.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage1-www.opel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

d1-auth.stellantis.com
stage1-www.citroen.co.uk
stage1-www.opel.de
stage1-www.vauxhall.co.uk
stage2-business.citroen.co.uk
stage2-www.citroen.co.uk
stage2-www.citroen.es
stage2-www.citroen.fr
stage2-www.opel.ch
stage2-www.opel.de
stage2-www.opel.it
stage2-www.vauxhall.co.uk

Other certificates including the domain name opel.de

(limited to 100 certificates)
fix.services-store.peugeot.fr
www.opelusadoscertificados.pt
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
corsa-e.opel.de
prd-admin.connect.opel.com
tis2web.service.gm.com
www.opelusadoscertificados.pt
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
my.opel.ba
ppr.connect.opel.com
stage1-www.opel.de
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
www.gm.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.dsautomobiles.com
ssl417033.cloudflaressl.com
pat.connect.opel.com
tis2web.service.gm.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
tis2web.service.gm.com
services-store.peugeot.fr
dev.connect.opel.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
stage1-www.opel.de
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
secure.opel.de
www.gm.com
uat-admin.connect.opel.com
stage1-www.opel.de
uat.connect.opel.com
corsa-e.opel.de
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
rc3.plus.opel.fr
plus.opel.de
inf.services-store.dsautomobiles.com
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
fix-admin.connect.opel.com
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
admin.services-store.dsautomobiles.com
dev.connect.opel.com
www.opel.cz
tis2web.service.gm.com
www.opelusadoscertificados.pt
stage1-www.opel.de
rc9.plus.opel.fr
inf-admin.connect.opel.com
ssl417035.cloudflaressl.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com

Certificate

The complete raw certificate details for stage1-www.opel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppqZ+GLeZsoB7TOsB+dA
ixqllXWOER0mF1IQ6oLl/RsGIeTczdGuTv3owM538EKsOsYjsISSb/gEIZ4ME0gg
ztsXIRnDd0bpdv7Rg+azUEZx1XdT/Xy/ZMxeOvlEOuZXKho1NLLqHVPnSQOMPLs/
czNZRGMiYNuBJAS6rnwqvFYv9PeAfu9AHasKx/hK/WMLm7ud3PN0e8O9QFrjtMFr
alfNnEnYp7jHKXYwzTFHIpqg7rCMQTB2uo4Vuts819zFPe119fqKfnHN2rr+H/yy
0o0Lp68XdURa+bmWLNsq6cgu6IFhqfaVvGiNV5d+SsEM7c8ggY33bpv3OkE0VRX5
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 347232026298727989738355425758563205044494
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-02 13:27:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 13:27:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage1-www.opel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21031795438932457263340860465050292628629911093261165416370697593185264772300831187224173089108890610984654524993030610617988741383968816962194707631179849891705472701935306098666956191594224336356553436423524034595225771548959212673998487329059428909766330110797991972529648460327254164875611249783503607817059772348525548269856335677055539833052977146978265968987598045830706060610631995125063422724398110474127582426769781382044923396626601089468839940294275671830836421022651190963768427506044212868751630631941944308140895713349784301716402840882888807127591067966014809262892249031546988286617927175615165102417
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							edb2005d9b438d6eaa62fcae7afd5b8b4d0b6163
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1-auth.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-business.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017ebad547aa0000040300463044022048b3363f980efb84b88413349a4d62179687911f6a6608be56e14d57e908148502200f9af1c7f74e8dfc0ec9336c3cf138b59fadbe1967e39114566e778f7964db090076002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017ebad54798000004030047304502200d78089ee8d7dbea4e2284e86512ecafd6fe302af1665021c11150d5542cc4ba022100cfb1a2bf280bc7540caae40fc4daea89ad89b4c16b1a341e87e4f21f3ca782a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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