at-media.opel.com

Issued by R3

About this certificate

This digital certificate with serial number 04:17:62:bc:18:95:f8:e3:b1:10:13:14:96:57:04:9a:f0:e2 was issued on by Let's Encrypt.

With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=at-media.opel.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:17:62:bc:18:95:f8:e3:b1:10:13:14:96:57:04:9a:f0:e2
Serial Number (int): 356406879160278751796309563642510462087394
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: ac:5c:b0:7a:f4:f6:46:63:d4:1a:f1:2d:d3:44:a2:97:f0:3d:6f:12
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:83:88:f5:f8:54:c4:0d:31:78:9e:54:e9:91:93:0c:99:86:15:3d
Fingerprint (sha256): 29:83:94:10:55:d6:78:1e:d7:1e:8a:78:cb:5d:6e:d8:82:17:52:80:d8:bb:8d:13:b8:f6:a2:30:30:ca:a9:aa

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate at-media.opel.com

56

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for at-media.opel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

at-media.opel.com
be-media.opel.com
bg-media.opel.com
ch-media.opel.com
checkcertificatepp.opel.fr
de-media.opel.com
es-media.opel.com
fr-media.opel.com
gr-media.opel.com
hr-media.opel.com
hu-media.opel.com
int-media.opel.com
it-media.opel.com
my.opelisland.is
myat.opel.com
mybe.opel.com
mybg.opel.com
mych.opel.com
mycz.opel.com
myde.opel.com
mydk.opel.com
myee.opel.com
myes.opel.com
myfi.opel.com
mygr.opel.com
myhr.opel.com
myhu.opel.com
myie.opel.com
myis.opel.com
myit.opel.com
mylt.opel.com
mylu.opel.com
mylv.opel.com
mymt.opel.com
mynl.opel.com
myno.opel.com
mypl.opel.com
mypt.opel.com
myro.opel.com
myse.opel.com
mysi.opel.com
mysk.opel.com
mytr.opel.com
nl-media.opel.com
opel.co.il
opel.dk
opel.dz
opel.se
opel.tn
pl-media.opel.com
pt-media.opel.com
ro-media.opel.com
rs-media.opel.com
ru-media.opel.com
store.opel.be
tr-media.opel.com

Other certificates including the domain name opel.com

(limited to 100 certificates)
*.opel.com
tis2web.service.opel.com
www.opelusadoscertificados.pt
abarth.pt
s.opel.com
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
www.opel.cz
rusipvmns0001.rus.opel.com
media.gm.com
www.gm.com
new-odnm.opel.com
wpg-wpfarm2-prdl2x.opel.com
aemstagems4-connect.alfaromeo.com
pat.connect.opel.com
dev.services-store.dsautomobiles.com
prechat.opel.com
abarth.pt
prd-admin.connect.opel.com
rusipvmova010.ad.opel.com
dpromo.abarth.it
rusitvmcrd011.rus.opel.com
www.opelusadoscertificados.pt
gf.preprod.opel.com
rusipvmova003.ad.opel.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
gmid.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
lm2insciv002-vl1729.lm2.opel.com
www.buick.com
ppr.connect.opel.com
abarth.pt
abarth.pt
www.asconnect.opel.com
rusipvmova006.ad.opel.com
spoepc.xw.gm.com
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
www.gm.com
abarth.pt
rimpsa.opel.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
gsa.rus.opel.com
sip-hr.mpsa.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
rusipvmpsa1189.ad.opel.com
spoepc.xw.gm.com
pat.connect.opel.com
media-professional.peugeot.ru
abarth.pt
aemdevms4-connectivity.alfaromeo.com
CRMIT.ext.opel.com
accessr.opel.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
abarth.pt
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
abarth.pt
ipgidvmdev117.ipg.opel.com
iessapdt4.opel.com
spoepc.xw.gm.com
www.buick.com
www.opel.cz
rusipvmpst152.rus.opel.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
www.opel.cz
admin.connect.opel.com
sip-hr.mpsa.com
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
sip-be.mpsa.com
lm2ipvmpsa056.lm2.opel.com
abarth.pt
mves.opel.com
cps.opel.com
admin.connect.opel.com
www.opel.cz
sip-be.mpsa.com
ipgitvmtst182.itpg.opel.com
dev-admin.connect.opel.com
pat-admin.connect.opel.com

Certificate

The complete raw certificate details for at-media.opel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XzxKUn8fL31+DwnxhNC
5mBsPZRFFh0D/eZaAP/kkORJAX7/vH+ICalibBZV9cdCtSj+Y64QVLy69172KRgn
sC6tCchoNB/wdE5c+Ss3FvjzJlgogE/6omcOuxEr+yQJaa5hayBkXgW7cTlRwc2+
HRz2m1g5BsWex+Fbiu62/CJbqrsvd1Q90pgDZFpX1ZWH9IzkAKmTLksVIubtTNAp
nRQ0AjrvY6ZDvItJOyYIknomph9xd0OnEazNhbSBiTQSUppU8N2AQnQ+ZJLOtDfI
saKsnfo83OFszjl2xQItYw9JcznYmBgvPE4PQcy6KxQV8kVud9Bsq0US/MqbFtRj
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 356406879160278751796309563642510462087394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 08:33:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 08:33:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'at-media.opel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29980089491322173308495836294764760966899788554642207499659895769504109807973666531437210426585419823456483128341789289574624443484121381226481662805795674785003583706799374044677848271448294649165873367131298984682304073796809269046211310069108056212006216464759548307721953289956059124753540995861611370911213948007177542383348520398799228725318308226882455739747792534413471043872141667382107009712902592842896455467834627571299720112684014594510222311066961974248476518999479945413164712370327256646545423022210438006729120346814253436333823646520006322456542275927913690086194949494058069211655159167265417749391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac5cb07af4f64663d41af12dd344a297f03d6f12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (910 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bg-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'checkcertificatepp.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gr-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hu-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opelisland.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myat.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybe.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybg.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mych.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycz.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myde.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydk.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myee.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myes.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfi.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mygr.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhr.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhu.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myie.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myis.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myit.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylt.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylu.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mylv.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mymt.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mynl.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myno.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypl.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypt.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myro.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myse.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysi.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mysk.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytr.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opel.tn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ro-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rs-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru-media.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tr-media.opel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2e5a10d7000004030047304502201098408649056ca2772c81300fec325399193f997cee5e0eb5cbb1caf130c8dd022100d520bb503c4de70daf7d2a335f63186d9636661e427cd727788905d16cc9b6c700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f2e5a11020000040300463044022003c086474e58dd34fe8524c94734c6af5fcb2ab09a9fcdeea7f7cf01ee877e4e022039faa43868423a6c77d598e17649abf5835a13591927f1b4ff8695310d13757c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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