corsa-e.opel.it

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:97:01:dd:d1:62:5d:64:e3:a4:41:ab:45:5e:a8:7a:db:33 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=corsa-e.opel.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:01:dd:d1:62:5d:64:e3:a4:41:ab:45:5e:a8:7a:db:33
Serial Number (int): 312721976172760840198719633111599894158131
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 7c:01:c7:d6:a8:1c:fc:bf:05:0e:7b:65:43:1f:b7:73:6b:29:62:c4
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 8a:4f:58:9d:f8:76:71:a3:6e:2f:ef:97:4c:cd:ae:51:2a:e0:43:fe
Fingerprint (sha256): 28:81:2d:96:44:10:7f:ad:f7:18:9d:51:1e:c0:d1:e7:21:04:98:4a:cd:f9:d8:f8:f8:61:21:48:9a:c2:70:e6

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate corsa-e.opel.it

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for corsa-e.opel.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

corsa-e.opel.it

Other certificates including the domain name opel.it

(limited to 100 certificates)
fix.services-store.peugeot.fr
prd.connect.opel.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
prd-admin.connect.opel.com
tis2web.service.gm.com
my.gm.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.connect.opel.com
my.opel.ba
www.buick.com
ppr.connect.opel.com
stage1-www.opel.de
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
inf.connect.opel.com
stock.opel.it
dev.services-store.dsautomobiles.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
pat.connect.opel.com
tis2web.service.gm.com
landingform.opel.it
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
stage1-www.opel.de
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
uat-admin.connect.opel.com
stage1-www.opel.de
uat.connect.opel.com
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
fix-admin.connect.opel.com
corsa-e.opel.it
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
my.gm.com
corsa-e.opel.it
my.gm.com
admin.services-store.dsautomobiles.com
dev.connect.opel.com
www.opel.cz
www.opel.it
stage1-www.opel.de
rc9.plus.opel.fr
inf-admin.connect.opel.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com
inf.services-store.dsautomobiles.com
www.buick.com
uat-admin.services-store.dsautomobiles.com
uat.services-store.dsautomobiles.com
my.gm.com
stage1-www.opel.de
my.opel.ba
inf-admin.connect.opel.com
stage1-www.opel.de

Certificate

The complete raw certificate details for corsa-e.opel.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312721976172760840198719633111599894158131
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-23 15:23:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-21 15:23:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'corsa-e.opel.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 803986731316273942224068150344229591732139960650287314022906086389029332426258452644278360846161229726892301248916690752737241099902785441091628309592774102260569368227867738401381715005767998990350725147840806773243280154821274584916483632923649249426195403389468387563984682670851043162405569548465942483884967013587791653670324527372163318037263044613343908970048678824701710516975822587741838734602425767657885575556470619323696295719743019026244165978304657928513251909640725654114523583496471807297585479098829132293530299460982820178802307984494561153301555980047317637775977356910500075632990412658501973528520243230483420207893954206530481124714559817989348270942430591644802158968565154363869814278626906421483093156776885573416496370694657920965136670860650863585629770944851602503674728353495602285704308640999906124762999365999835880642550411782093611660611751546324023034991303313884853137163329404793085173643628647918491214278779162862527905220114265060777259517577725007421807374224673528757072180053588475302991492578952033911125086693548152481587886743360305301912529558255088020079792805625604135003085635482138132129709920587039610379812622153996967385285612240295680712752361254269088185763929364778342084201333
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7c01c7d6a81cfcbf050e7b65431fb7736b2962c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corsa-e.opel.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016df96db99400000403004630440220457cb84e31eb3ae824c8639dc60237507a97858000b3c86e33e4addd10010a3b02204cacc79cb74c20a6d72c5cdb55dbd329c5e242ad9bb0a9855c9451168f90d05f0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016df96dba4000000403004730450220553b18adfdd4abdc2b33f85fd3aadd4e715f3a93cc272ead3481331c6400cb7e022100ae9984499f21675f735ec8c74c9f3baacd8d0dae89ce920d4f4f082901bb0dc0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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