stage1-www.opel.de
Issued by R3
About this certificate
This digital certificate with serial number 04:ff:82:18:88:12:3a:79:e9:0b:33:10:1c:2f:21:34:bf:5f was issued on by Let's Encrypt.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=stage1-www.opel.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:ff:82:18:88:12:3a:79:e9:0b:33:10:1c:2f:21:34:bf:5fSerial Number (int): 435394074306308849201992433837928478981983
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: 38:d9:e0:e0:1a:63:4e:80:64:21:bd:bf:bf:2c:9e:3a:36:f7:2c:0f
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): ad:f6:b5:4b:cf:be:5c:02:af:e6:fc:b0:85:49:40:e1:3b:80:d8:5d
Fingerprint (sha256): 30:c6:bc:c1:1d:b5:eb:c8:e3:ab:42:34:dd:a7:18:5a:11:6e:d8:08:31:80:05:d7:90:3c:9a:a2:cc:47:7e:0f
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate stage1-www.opel.de
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stage1-www.opel.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
d1-auth.stellantis.com
stage1-www.citroen.co.uk
stage1-www.opel.de
stage1-www.vauxhall.co.uk
stage2-business.citroen.co.uk
stage2-www.citroen.co.uk
stage2-www.citroen.es
stage2-www.citroen.fr
stage2-www.opel.ch
stage2-www.opel.de
stage2-www.opel.it
stage2-www.vauxhall.co.uk
stage1-www.citroen.co.uk
stage1-www.opel.de
stage1-www.vauxhall.co.uk
stage2-business.citroen.co.uk
stage2-www.citroen.co.uk
stage2-www.citroen.es
stage2-www.citroen.fr
stage2-www.opel.ch
stage2-www.opel.de
stage2-www.opel.it
stage2-www.vauxhall.co.uk
Other certificates including the domain name opel.de
(limited to 100 certificates)
fix.services-store.peugeot.fr
www.opelusadoscertificados.pt
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
corsa-e.opel.de
prd-admin.connect.opel.com
tis2web.service.gm.com
www.opelusadoscertificados.pt
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
my.opel.ba
ppr.connect.opel.com
stage1-www.opel.de
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
www.gm.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.dsautomobiles.com
ssl417033.cloudflaressl.com
pat.connect.opel.com
tis2web.service.gm.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
tis2web.service.gm.com
services-store.peugeot.fr
dev.connect.opel.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
stage1-www.opel.de
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
secure.opel.de
www.gm.com
uat-admin.connect.opel.com
stage1-www.opel.de
uat.connect.opel.com
corsa-e.opel.de
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
rc3.plus.opel.fr
plus.opel.de
inf.services-store.dsautomobiles.com
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
fix-admin.connect.opel.com
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
admin.services-store.dsautomobiles.com
dev.connect.opel.com
www.opel.cz
tis2web.service.gm.com
www.opelusadoscertificados.pt
stage1-www.opel.de
rc9.plus.opel.fr
inf-admin.connect.opel.com
ssl417035.cloudflaressl.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com
www.opelusadoscertificados.pt
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
dev.services-store.dsautomobiles.com
corsa-e.opel.de
prd-admin.connect.opel.com
tis2web.service.gm.com
www.opelusadoscertificados.pt
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
pat.services-store.dsautomobiles.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
my.opel.ba
ppr.connect.opel.com
stage1-www.opel.de
my.opel.ba
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
my.opel.ba
trn.services-store.dsautomobiles.com
www.gm.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
dev-admin.services-store.dsautomobiles.com
ssl417033.cloudflaressl.com
pat.connect.opel.com
tis2web.service.gm.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
tis2web.service.gm.com
services-store.peugeot.fr
dev.connect.opel.com
fix.services-store.peugeot.fr
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
stage1-www.opel.de
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
services-store.peugeot.fr
my.opel.ba
trn.services-store.dsautomobiles.com
secure.opel.de
www.gm.com
uat-admin.connect.opel.com
stage1-www.opel.de
uat.connect.opel.com
corsa-e.opel.de
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
www.opel.cz
rc3.plus.opel.fr
plus.opel.de
inf.services-store.dsautomobiles.com
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
dev.services-store.dsautomobiles.com
www.opel.cz
fix-admin.connect.opel.com
admin.services-store.peugeot.fr
services-store.peugeot.fr
tis2web.service.gm.com
admin.services-store.dsautomobiles.com
dev.connect.opel.com
www.opel.cz
tis2web.service.gm.com
www.opelusadoscertificados.pt
stage1-www.opel.de
rc9.plus.opel.fr
inf-admin.connect.opel.com
ssl417035.cloudflaressl.com
pat-admin.connect.opel.com
ppr.services-store.dsautomobiles.com
fix-admin.services-store.dsautomobiles.com
Certificate
The complete raw certificate details for stage1-www.opel.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFSDCCBDCgAwIBAgISBP+CGIgSOnnpCzMQHC8hNL9fMA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMjA4MzExMDM5MDhaFw0yMjExMjkxMDM5MDdaMB0xGzAZBgNVBAMT EnN0YWdlMS13d3cub3BlbC5kZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALf58CL6u0MpMJe3/+E/D4A3zx4C7x+8ewKDjAt+gCeE7uMSZeMQVf3Eplz6 YTy+yf0gRfKYrL/Bt//S6/nh6hrPCuAMyHCmL68GuCy10FhqsgStwm9VSEnvnWT2 e0dy9YRIx8KBV3uPftjTAh/UNb5LMmjuboZtjImYQqFsn8WMXwxhjxrMi+I/sm9F 2DllRAcGJ+coVjbzWe0bMZwoVh8VF/zwZnDFiebwaLRVKfajI6CtWEseiPUmdUcg Kff2Nhilu4IXWyojo30nAa/Dks+sHPUrJZvcGkm2Puzh8tFXv8I2GzquHWkN8E6V /Me8fuuk4PlgwWb6BgCDYDYdsmUCAwEAAaOCAmswggJnMA4GA1UdDwEB/wQEAwIF oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUONng4BpjToBkIb2/vyyeOjb3LA8wHwYDVR0jBBgwFoAUFC6zF7dY VsuuUAlA5h+vnYsUwsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRw Oi8vcjMuby5sZW5jci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNy Lm9yZy8wggEsBgNVHREEggEjMIIBH4IWZDEtYXV0aC5zdGVsbGFudGlzLmNvbYIY c3RhZ2UxLXd3dy5jaXRyb2VuLmNvLnVrghJzdGFnZTEtd3d3Lm9wZWwuZGWCGXN0 YWdlMS13d3cudmF1eGhhbGwuY28udWuCHXN0YWdlMi1idXNpbmVzcy5jaXRyb2Vu LmNvLnVrghhzdGFnZTItd3d3LmNpdHJvZW4uY28udWuCFXN0YWdlMi13d3cuY2l0 cm9lbi5lc4IVc3RhZ2UyLXd3dy5jaXRyb2VuLmZyghJzdGFnZTItd3d3Lm9wZWwu Y2iCEnN0YWdlMi13d3cub3BlbC5kZYISc3RhZ2UyLXd3dy5vcGVsLml0ghlzdGFn ZTItd3d3LnZhdXhoYWxsLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysG AQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQu b3JnMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBuFCmh /S2fBOnACEXjou7OLE9GC6NvLSjG3GnY4xnxBfjRuQdCXo+BjLEtGiWnb3ytdIMl 3hO0xwGZWL0iVmCVrp14mZ7MjVYVxwm6oYxT2OGi6sT90YNBAX2C4VzQjdC6MDke mW1Wgc0RpRkswvG38I4PnAg3STwPnDz95dKN5xKC3Spu/Z7kqmbW3JhqNXtOG68E 2umQzv0oJw2co+zyl/ZSi7QrBfheFSRLyZDAjuvpfZMds1UiFLKOyj0VdicZvbMF NlTo0yWFTDRZBtS6nzVaUsJHx3jC+UA+vPEwxc901avJ+nW8ehd9qGAVOxVYDXLj hCduAw+aaelqWQbi -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/nwIvq7Qykwl7f/4T8P gDfPHgLvH7x7AoOMC36AJ4Tu4xJl4xBV/cSmXPphPL7J/SBF8pisv8G3/9Lr+eHq Gs8K4AzIcKYvrwa4LLXQWGqyBK3Cb1VISe+dZPZ7R3L1hEjHwoFXe49+2NMCH9Q1 vksyaO5uhm2MiZhCoWyfxYxfDGGPGsyL4j+yb0XYOWVEBwYn5yhWNvNZ7RsxnChW HxUX/PBmcMWJ5vBotFUp9qMjoK1YSx6I9SZ1RyAp9/Y2GKW7ghdbKiOjfScBr8OS z6wc9Sslm9waSbY+7OHy0Ve/wjYbOq4daQ3wTpX8x7x+66Tg+WDBZvoGAINgNh2y ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 435394074306308849201992433837928478981983 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-31 10:39:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-29 10:39:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage1-www.opel.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23224858846782244793602306894276656645864795999460808668202093606635013422906856636489328337620358341270845755148301694190771224976319993153927333910562024781412946085197502534873851219019670843289208544836573020436015735681688915375017942111194567826898321248792668567219692969102537360879730509201979275395036826999208953011050192659494171573362526477478153225181591833330287764593726459635405574153466952800626720334177913265832742718121098739676230579738291521652023615589721648312181297373259398002955109631026232984579450844834207837104150238442299761509299900641558552044387890785517951902634911348085680353893 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38d9e0e01a634e806421bdbfbf2c9e3a36f72c0f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (291 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'd1-auth.stellantis.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.citroen.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.opel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage1-www.vauxhall.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-business.citroen.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.es' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.citroen.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.ch' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.opel.it' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage2-www.vauxhall.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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