brand.onstar.com

Issued by R3

About this certificate

This digital certificate with serial number 04:f1:5a:76:3a:9f:3c:38:2f:75:07:d1:59:ed:73:58:ab:91 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=brand.onstar.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f1:5a:76:3a:9f:3c:38:2f:75:07:d1:59:ed:73:58:ab:91
Serial Number (int): 430577438554632777695500538106652317494161
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c6:57:12:92:21:26:f1:a8:ca:ef:ba:76:a0:09:f2:eb:36:74:8e:7a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): e2:98:4c:30:83:35:dd:8a:a5:52:41:01:88:d7:fe:d9:22:90:74:e7
Fingerprint (sha256): 19:23:81:62:07:1c:b1:85:4f:f0:0b:31:ec:d8:c5:2f:1b:16:7a:86:4a:29:90:71:41:34:19:c8:31:fd:87:d0

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate brand.onstar.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for brand.onstar.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

brand.onstar.com

Other certificates including the domain name onstar.com

(limited to 100 certificates)
secure06.stage.lithium.com
mi.onstar.com
mi.onstar.com
www.cadillac.com
secure06.stage.lithium.com
admin2.stg.onstar.com
delivery.onstar.com
gsp.eur.onstar.com
www.onstar.com
view.e.onstar.com
brand.onstar.com
akamai-san15.exacttarget.com
vnm-sfobms-idta-epgw.onstar.com
www.cadillac.com
www.gm.com
secure03.lithium.com
www.cadillac.com
vapi-l7g-lmrxezlc.onstar.gm.com
admin.onstar.com
*.gm.com
secure06.stage.lithium.com
brand.onstar.com
secure03.lithium.com
guardianvoice.onstar.com
api.eur.onstar.com
click.e.onstar.com
brand.onstar.com
my.gm.com
s.onstar.com
a.onstar.com
pub-stage-cei.onstar.com
secure06.stage.lithium.com
www.onstar.com
dealer.gm.com
www.onstar.com
outlook.gm.com
s.onstar.com
view.atyourservice.onstar.com
brand.onstar.com
b2b.onstar.com
secure06.stage.lithium.com
mi.onstar.com
click.atyourservice.onstar.com
www.onstar.com
www.onstar.com
www.gm.com
secure03.lithium.com
s.onstar.com
api.eur.onstar.com
vehicle-pp2.api.eur.onstar.com
admin.eu.onstar.com
sso.onstar.com
www.gmcarabia.com
click.atyourservice.onstar.com
akamai-san15.exacttarget.com
s.onstar.com
www.onstar.com
osc1x-pub-onstar-prdmx.gm.com
secure06.stage.lithium.com
secure06.stage.lithium.com
osc1x-pub-onstar-prdwx.gm.com
s.onstar.com
www.cadillac.com
training.onstar.com
sts.onstar.com
sts.onstar.com
tib.onstar.com
www.gm.com
secure03.lithium.com
*.gm.com
secure06.stage.lithium.com
dcwxpvmcei005.edc.nam.gm.com
training.onstar.com
gm.com
osc1x-pub-onstar-prdmx.gm.com
training.onstar.com
secure06.stage.lithium.com
click.atyourservice.onstar.com
secure06.stage.lithium.com
secure03.lithium.com
secure03.lithium.com
outlook.gm.com
brand.onstar.com
secure03.lithium.com
www.cadillac.com
onstar.com
osc1x-pub-onstar-prdmx.gm.com
tib.onstar.com
secure03.lithium.com
gm.com
*.gm.com
gsp.eur.onstar.com
pub-prod-cei-onstar-prdw.gm.com
waplb.gm.com
secure06.stage.lithium.com
training.onstar.com
*.gm.com
www.cadillac.com
www.gmcarabia.com
s.onstar.com

Certificate

The complete raw certificate details for brand.onstar.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgISBPFadjqfPDgvdQfRWe1zWKuRMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjExMjYwNzEzNTZaFw0yMzAyMjQwNzEzNTVaMBsxGTAXBgNVBAMT
EGJyYW5kLm9uc3Rhci5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoIC
AQC5aw5suI6eXzQeJAvhk+AHErhDgXOfNlsLJLMErgxSM7iTrMxTSPbJaUa4u02H
qs6/D1y6Ld3i6tK39z3GqUQ4FBiSJg3B7q9Ue6kVDdTac9jXGTUzt9YTIhBoBwdf
mETE6ne7/Vw2mSUzkhRRMo2dLNktnZeds1PI8q8eBqNcU/o6yyeE4Ey7ys7IxjZF
ZqupmFKnGxFsWeUXhPZQ4v9VLjTriZ7aa1BxIT1g0eJq3c3EqMRx5z9nuTKZD1Hf
/q9ptp1hPaXINEW0F371LFBNiugiIX3t2CbgheHr2ltpALw440qpl2XxnZnQzxaE
eIx5ZGlvLCPIfwKS4evxGsTp1mnFyU46IJYgdIG2gERKg5Cyif0pykD7EiKk82iP
ehOjivLWad52pTMae8IfDznv6PAlptsbgpE6lbk8QcipMoz4a+asAjSRcn9LAQTN
/62JD+5sSWjXwN6jDk/3roLGXaHVIzoop1Fu0L/CtmW1rdggkJl22M0psFKwco35
twVLp7zP0IA7cdRHIXs3Jau+JC4NRyB2ptas53fxGDJTf/4yI5yc74HqfFSpaAvP
URsZA7U8DeAb8g/bukk/fB8SfkpUddY6RJAcdUGyXbiizEQp3nDNmh3DHdzgGt+z
EFI7VjvNxviwfgX//9ThgBwzFx5eAXpjlGZTz5mm/NT7lwIDAQABo4IBWDCCAVQw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTGVxKSISbxqMrvunagCfLrNnSOejAfBgNV
HSMEGDAWgBQULrMXt1hWy65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYI
KwYBBQUHMAGGFWh0dHA6Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0
cDovL3IzLmkubGVuY3Iub3JnLzAbBgNVHREEFDASghBicmFuZC5vbnN0YXIuY29t
MEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUH
AgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMBMGCisGAQQB1nkCBAMBAf8E
AgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCOltJDmUmK/YjjZWVRCDOtYV4SghhDbA1O
ZYOB0LroEkVBTKSAqSSoMYQmI2IVXTJZcX7V93YmySm76IH88iEWQcv5Dr4BIZfR
DnZshqyFHypmfob/FiOVgHgEsCpaJpcEzL/cqIYfV/0mJt5g+A+pjfuz8evnL7cu
7ow6DhWMwXFu6vEbDgbF3k/phvjTkksX/SWjxCOwzA3maU+utCzTLC5fYgk0oBsR
vfIcistVFMS2zMPUNdR7+w5HWb3/IpLnxrG4QPI8dhH0u2Blh+u5FJftAKV8pMZf
nZXr6+LRkSBGsQurAXCNH8RWy8OP5IniphQC3KoEqNNhi7vDj+Cf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 430577438554632777695500538106652317494161
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-26 07:13:56 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 07:13:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'brand.onstar.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 756440214258478733576932676852824536326366995626660150940347112686704037971404285393560659595577521806177061366958809823777588938534107454409526101349819403916466704515178542505591511736789002448740391572317375976695376261521898148778014289891561737344430371939380568576398155390735913593719972906714991784299964140921392035492381291214541301409544947563300275848576877829785147357635282867947964605006406432561774125897498461529727450733234415613796218304672326790518542991466418042914577259154467722219263787617872896511508604149607494317215703033148908578193035609135605142086799874930392258673360687667050549479368205661129443581320844557994183862711316243620424266960828302429111518172060847045948203823165073644329826983825276879777735790357365507524177673258979446277719462337226314027508243273222486439844600686581469876922620980036971766431329363794406294854974845187041755746197402819832097711071969495475994203554986311008263754249653707789958715253990132258562341053941214155537631555366808173260014156840888367974386153796588579383575419321345089137495351738944094304406983225264494796262065673830620945358505074469785572343361160173856929782774334132723136066254016176689401122051968445144959562054926638035705584221079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c65712922126f1a8caefba76a009f2eb36748e7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brand.onstar.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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