stage1-www.opel.de

Issued by R3

About this certificate

This digital certificate with serial number 04:ff:82:18:88:12:3a:79:e9:0b:33:10:1c:2f:21:34:bf:5f was issued on by Let's Encrypt.

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=stage1-www.opel.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ff:82:18:88:12:3a:79:e9:0b:33:10:1c:2f:21:34:bf:5f
Serial Number (int): 435394074306308849201992433837928478981983
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 38:d9:e0:e0:1a:63:4e:80:64:21:bd:bf:bf:2c:9e:3a:36:f7:2c:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): ad:f6:b5:4b:cf:be:5c:02:af:e6:fc:b0:85:49:40:e1:3b:80:d8:5d
Fingerprint (sha256): 30:c6:bc:c1:1d:b5:eb:c8:e3:ab:42:34:dd:a7:18:5a:11:6e:d8:08:31:80:05:d7:90:3c:9a:a2:cc:47:7e:0f

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate stage1-www.opel.de

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage1-www.opel.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

d1-auth.stellantis.com
stage1-www.citroen.co.uk
stage1-www.opel.de
stage1-www.vauxhall.co.uk
stage2-business.citroen.co.uk
stage2-www.citroen.co.uk
stage2-www.citroen.es
stage2-www.citroen.fr
stage2-www.opel.ch
stage2-www.opel.de
stage2-www.opel.it
stage2-www.vauxhall.co.uk

Other certificates including the domain name opel.de

(limited to 100 certificates)
fix.services-store.peugeot.fr
www.opelusadoscertificados.pt
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
corsa-e.opel.de
prd-admin.connect.opel.com
tis2web.service.gm.com
www.opelusadoscertificados.pt
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
my.opel.ba
ppr.connect.opel.com
stage1-www.opel.de
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
www.gm.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.dsautomobiles.com
ssl417033.cloudflaressl.com
pat.connect.opel.com
tis2web.service.gm.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
tis2web.service.gm.com
services-store.peugeot.fr
dev.connect.opel.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
stage1-www.opel.de
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
secure.opel.de
www.gm.com
uat-admin.connect.opel.com
stage1-www.opel.de
uat.connect.opel.com
corsa-e.opel.de
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
rc3.plus.opel.fr
plus.opel.de
inf.services-store.dsautomobiles.com
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
fix-admin.connect.opel.com
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
admin.services-store.dsautomobiles.com
dev.connect.opel.com
www.opel.cz
tis2web.service.gm.com
www.opelusadoscertificados.pt
stage1-www.opel.de
rc9.plus.opel.fr
inf-admin.connect.opel.com
ssl417035.cloudflaressl.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com

Certificate

The complete raw certificate details for stage1-www.opel.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/nwIvq7Qykwl7f/4T8P
gDfPHgLvH7x7AoOMC36AJ4Tu4xJl4xBV/cSmXPphPL7J/SBF8pisv8G3/9Lr+eHq
Gs8K4AzIcKYvrwa4LLXQWGqyBK3Cb1VISe+dZPZ7R3L1hEjHwoFXe49+2NMCH9Q1
vksyaO5uhm2MiZhCoWyfxYxfDGGPGsyL4j+yb0XYOWVEBwYn5yhWNvNZ7RsxnChW
HxUX/PBmcMWJ5vBotFUp9qMjoK1YSx6I9SZ1RyAp9/Y2GKW7ghdbKiOjfScBr8OS
z6wc9Sslm9waSbY+7OHy0Ve/wjYbOq4daQ3wTpX8x7x+66Tg+WDBZvoGAINgNh2y
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 435394074306308849201992433837928478981983
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 10:39:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 10:39:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage1-www.opel.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23224858846782244793602306894276656645864795999460808668202093606635013422906856636489328337620358341270845755148301694190771224976319993153927333910562024781412946085197502534873851219019670843289208544836573020436015735681688915375017942111194567826898321248792668567219692969102537360879730509201979275395036826999208953011050192659494171573362526477478153225181591833330287764593726459635405574153466952800626720334177913265832742718121098739676230579738291521652023615589721648312181297373259398002955109631026232984579450844834207837104150238442299761509299900641558552044387890785517951902634911348085680353893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							38d9e0e01a634e806421bdbfbf2c9e3a36f72c0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1-auth.stellantis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-business.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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