www.opel.cz

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:56:cb:ef:0e:3f:68:3b:a8:3c:83:33:e4:de:7b:ec:c0:7b was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.opel.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:56:cb:ef:0e:3f:68:3b:a8:3c:83:33:e4:de:7b:ec:c0:7b
Serial Number (int): 290872215881552342795365250640723080691835
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:df:b9:ee:ee:27:14:16:6b:ee:dd:7a:6e:f0:dd:8a:b2:23:e8:26
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:ab:bb:76:c1:85:83:0a:c4:ec:1b:71:20:58:32:12:ad:07:3c:00
Fingerprint (sha256): 3c:7c:fa:f2:30:a8:bc:ad:ef:79:55:63:98:51:3d:b4:58:d1:46:b0:c9:b5:04:e7:5b:4f:79:bd:f8:32:f6:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.opel.cz

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.opel.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akamai.mmg.opel2.pprod.e-gm.net
bpirapidjn.opel-group.com
de.opel.ch
dealerportal.opel-group.com
fr.opel.be
fr.opel.ch
it.opel.ch
mmg.opel.de
mves-auth.opel.com
mves-vendor.opel.com
mves.opel.com
my.opel.at
my.opel.ba
my.opel.be
my.opel.bg
my.opel.ch
my.opel.com.cy
my.opel.com.mt
my.opel.com.tr
my.opel.cz
my.opel.de
my.opel.dk
my.opel.ee
my.opel.es
my.opel.fi
my.opel.fr
my.opel.gr
my.opel.hr
my.opel.hu
my.opel.ie
my.opel.is
my.opel.it
my.opel.lt
my.opel.lu
my.opel.lv
my.opel.mk
my.opel.nl
my.opel.no
my.opel.pl
my.opel.pt
my.opel.ro
my.opel.rs
my.opel.se
my.opel.si
my.opel.sk
my.vauxhall.co.uk
nl.opel.be
spongepc.opel.com
www.opel-algerie.com
www.opel.at
www.opel.ba
www.opel.be
www.opel.bg
www.opel.ch
www.opel.cl
www.opel.co.za
www.opel.com
www.opel.com.tr
www.opel.cz
www.opel.de
www.opel.ee
www.opel.es
www.opel.fi
www.opel.fr
www.opel.gr
www.opel.hr
www.opel.hu
www.opel.ie
www.opel.it
www.opel.lt
www.opel.lu
www.opel.lv
www.opel.mk
www.opel.nl
www.opel.no
www.opel.pl
www.opel.pt
www.opel.ro
www.opel.rs
www.opel.ru
www.opel.si
www.opel.sk
www.opelauto.com.mk
www.opelauto.md
www.opelcertifiedusedcars.be
www.opelegypt.net
www.opelukraine.com
www.ua.opelukraine.com
www.vauxhall.co.uk

Other certificates including the domain name opel.cz

(limited to 100 certificates)
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
www.opel.cz
www.gm.com
my.opel.ba
pat.connect.opel.com
my.opel.ba
inf.connect.opel.com
my.opel.ba
my.opel.cz
www.buick.com
ppr.connect.opel.com
my.opel.ba
www.opel.cz
my.opel.ba
servis.opel.cz
www.gm.com
my.opel.ba
www.buick.com
pat.connect.opel.com
www.opel.gr
dev-admin.connect.opel.com
dev.connect.opel.com
www.buick.com
www.buick.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
www.gm.com
www.opel.cz
dev.connect.opel.com
admin.connect.opel.com
www.opel.cz
dev-admin.connect.opel.com
pat-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
my.opel.ba
www.gm.com
uat.connect.opel.com
admin.connect.opel.com
dev-admin.connect.opel.com
dev-admin.connect.opel.com
servis.opel.cz
www.opel.cz
ppr.connect.opel.com
www.opel.cz
dev.connect.opel.com
my.opel.ba
dev.connect.opel.com
www.opel.cz
fix-admin.connect.opel.com
dev.connect.opel.com
www.opel.cz
servis.opel.cz
servis.opel.cz
pat-admin.connect.opel.com
www.buick.com
app.vipallinclusive.com
my.opel.ba
app.vipallinclusive.com
www.gm.com
inf-admin.connect.opel.com
ppr-admin.connect.opel.com
www.opel.cz
my.opel.ba
uat-admin.connect.opel.com
www.opel.cz
www.opel.cz
my.opel.ba
my.opel.ba
www.opel.cz
www.opel.cz
dev-admin.connect.opel.com
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
www.opel.cz
inf-admin.connect.opel.com
my.opel.ba
fix-admin.connect.opel.com
pat-admin.connect.opel.com
my.opel.ba
pat.connect.opel.com
connect.opel.com
www.opel.cz
www.opel.cz
admin.connect.opel.com
www.opel.cz
my.opel.ba
ppr-admin.connect.opel.com
my.opel.ba
www.opel.cz
ppr.connect.opel.com
dev-admin.connect.opel.com
my.opel.ba

Certificate

The complete raw certificate details for www.opel.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKTzCCCTegAwIBAgISA1bL7w4/aDuoPIMz5N577MB7MA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA1MTUyMTU4MTZaFw0x
OTA4MTMyMTU4MTZaMBYxFDASBgNVBAMTC3d3dy5vcGVsLmN6MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlRHMOEik2msqbQXa8O5mgCYRqDKOwFZ8aW
fOmPJ1JYXyoebGXM7CJizneT+8DN4FJWkrhJ3e7y2b//gT4TmJMErZS1da6OZUeX
zZEKtKSZeCgpmw0IY7Ygs7JFUZVkgT4OAabB94QXbYbY4AFA0aeNjcvk17ysame2
xO92vI745iXHNkwp9jvBcTG5Qlr3vAXGo2ro9DjkmWVJJFOt4BNGj+jXfmS1Asm7
MjZAwqNvYAfvk/8IAOOLfBZ/lWftXCwded8DwrjTYiwNQ/f7yYtl7SBKblpLy8KL
s28jj2iJzarAOhRiAqjd0e2TLuo2aFQwYBlAEnHNPNrBdGPKrQIDAQABo4IHYTCC
B10wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRI37nu7icUFmvu3Xpu8N2KsiPoJjAf
BgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcBAQRjMGEw
LgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlwdC5vcmcw
LwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlwdC5vcmcv
MIIFFQYDVR0RBIIFDDCCBQiCH2FrYW1haS5tbWcub3BlbDIucHByb2QuZS1nbS5u
ZXSCGWJwaXJhcGlkam4ub3BlbC1ncm91cC5jb22CCmRlLm9wZWwuY2iCG2RlYWxl
cnBvcnRhbC5vcGVsLWdyb3VwLmNvbYIKZnIub3BlbC5iZYIKZnIub3BlbC5jaIIK
aXQub3BlbC5jaIILbW1nLm9wZWwuZGWCEm12ZXMtYXV0aC5vcGVsLmNvbYIUbXZl
cy12ZW5kb3Iub3BlbC5jb22CDW12ZXMub3BlbC5jb22CCm15Lm9wZWwuYXSCCm15
Lm9wZWwuYmGCCm15Lm9wZWwuYmWCCm15Lm9wZWwuYmeCCm15Lm9wZWwuY2iCDm15
Lm9wZWwuY29tLmN5gg5teS5vcGVsLmNvbS5tdIIObXkub3BlbC5jb20udHKCCm15
Lm9wZWwuY3qCCm15Lm9wZWwuZGWCCm15Lm9wZWwuZGuCCm15Lm9wZWwuZWWCCm15
Lm9wZWwuZXOCCm15Lm9wZWwuZmmCCm15Lm9wZWwuZnKCCm15Lm9wZWwuZ3KCCm15
Lm9wZWwuaHKCCm15Lm9wZWwuaHWCCm15Lm9wZWwuaWWCCm15Lm9wZWwuaXOCCm15
Lm9wZWwuaXSCCm15Lm9wZWwubHSCCm15Lm9wZWwubHWCCm15Lm9wZWwubHaCCm15
Lm9wZWwubWuCCm15Lm9wZWwubmyCCm15Lm9wZWwubm+CCm15Lm9wZWwucGyCCm15
Lm9wZWwucHSCCm15Lm9wZWwucm+CCm15Lm9wZWwucnOCCm15Lm9wZWwuc2WCCm15
Lm9wZWwuc2mCCm15Lm9wZWwuc2uCEW15LnZhdXhoYWxsLmNvLnVrggpubC5vcGVs
LmJlghFzcG9uZ2VwYy5vcGVsLmNvbYIUd3d3Lm9wZWwtYWxnZXJpZS5jb22CC3d3
dy5vcGVsLmF0ggt3d3cub3BlbC5iYYILd3d3Lm9wZWwuYmWCC3d3dy5vcGVsLmJn
ggt3d3cub3BlbC5jaIILd3d3Lm9wZWwuY2yCDnd3dy5vcGVsLmNvLnphggx3d3cu
b3BlbC5jb22CD3d3dy5vcGVsLmNvbS50coILd3d3Lm9wZWwuY3qCC3d3dy5vcGVs
LmRlggt3d3cub3BlbC5lZYILd3d3Lm9wZWwuZXOCC3d3dy5vcGVsLmZpggt3d3cu
b3BlbC5mcoILd3d3Lm9wZWwuZ3KCC3d3dy5vcGVsLmhyggt3d3cub3BlbC5odYIL
d3d3Lm9wZWwuaWWCC3d3dy5vcGVsLml0ggt3d3cub3BlbC5sdIILd3d3Lm9wZWwu
bHWCC3d3dy5vcGVsLmx2ggt3d3cub3BlbC5ta4ILd3d3Lm9wZWwubmyCC3d3dy5v
cGVsLm5vggt3d3cub3BlbC5wbIILd3d3Lm9wZWwucHSCC3d3dy5vcGVsLnJvggt3
d3cub3BlbC5yc4ILd3d3Lm9wZWwucnWCC3d3dy5vcGVsLnNpggt3d3cub3BlbC5z
a4ITd3d3Lm9wZWxhdXRvLmNvbS5ta4IPd3d3Lm9wZWxhdXRvLm1kghx3d3cub3Bl
bGNlcnRpZmllZHVzZWRjYXJzLmJlghF3d3cub3BlbGVneXB0Lm5ldIITd3d3Lm9w
ZWx1a3JhaW5lLmNvbYIWd3d3LnVhLm9wZWx1a3JhaW5lLmNvbYISd3d3LnZhdXho
YWxsLmNvLnVrMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgw
JgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBBAYKKwYB
BAHWeQIEAgSB9QSB8gDwAHYAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWmOLHHaFRL
2I0AAAFqvbe/BwAABAMARzBFAiA1LFbvcoy7rq/MXy7PXiKOhyi0KPv2kA/XiVLP
lUHeOAIhAKw3ZZjxv603N/at1TWFd2GHTZknNVz7jIAX2SvgZk8UAHYAdH7agzGt
MxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFqvbfA2gAABAMARzBFAiB09DQ5
fccnZA6rL42TDSkkmb+zLppm0aajX+ghg9WUWAIhAP1vx2ky2MMr50XRL4V6VfGG
RReJx7UtxbVlf8R1Q9i5MA0GCSqGSIb3DQEBCwUAA4IBAQAJSD1LNiO3cdpTQvVi
7nciZzkCyazHI+8YAZO8h8MnjIklt2maUU8J3qw9qKWya3jyV2a266qiV2BiSn6h
U8yWPhjM+RhCTv84QYIsUKwxULmEb/XO4VpcKCJ4/rzYanJ+PvrSdSKAKsb6EOrd
cF4UFZiPUo64Ku6S44RFS4hHx871BWBVAeWHGLElWrKVCJIXHZfXSW4IzlKq0FSr
mw3/AuzKVLXTiCpUMf8W2EP05iyNmQ8nODDBvrypeMbkypOZHG50T3+HR2vWHwYF
Fe4bn8kcuC4DbwkUX7ojriqcPINu7OxDaBVsoov6DufQZ+XB7B5xG6yHM17PrvKi
1gB1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nlRHMOEik2msqbQXa8O
5mgCYRqDKOwFZ8aWfOmPJ1JYXyoebGXM7CJizneT+8DN4FJWkrhJ3e7y2b//gT4T
mJMErZS1da6OZUeXzZEKtKSZeCgpmw0IY7Ygs7JFUZVkgT4OAabB94QXbYbY4AFA
0aeNjcvk17ysame2xO92vI745iXHNkwp9jvBcTG5Qlr3vAXGo2ro9DjkmWVJJFOt
4BNGj+jXfmS1Asm7MjZAwqNvYAfvk/8IAOOLfBZ/lWftXCwded8DwrjTYiwNQ/f7
yYtl7SBKblpLy8KLs28jj2iJzarAOhRiAqjd0e2TLuo2aFQwYBlAEnHNPNrBdGPK
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290872215881552342795365250640723080691835
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-15 21:58:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 21:58:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.opel.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27579774048599014026437086169694989290570153686552130224424750143231553819212851393963645380745741359811593564405470417711026080074269935518795154318193249965227275188868894441675292431407733791761760152555912261509087619347156524133657076058861687437873872539669049849457572430364829737333612014559371836390169990341893021846550794289326574207447802055848734875183446151602200598987291313601873410963930472384832792061906964582676226301151717279582203643733791640790091319241504407802631250241708807670582989564241231811886625225951847280479420250750828847631314370020097522535321132558965108264433684970110854613677
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48dfb9eeee2714166beedd7a6ef0dd8ab223e826
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1292 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.mmg.opel2.pprod.e-gm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bpirapidjn.opel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealerportal.opel-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmg.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves-auth.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves-vendor.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mves.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spongepc.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel-algerie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelauto.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelauto.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelcertifiedusedcars.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelegypt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opelukraine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ua.opelukraine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016abdb7bf0700000403004730450220352c56ef728cbbaeafcc5f2ecf5e228e8728b428fbf6900fd78952cf9541de38022100ac376598f1bfad3737f6add535857761874d9927355cfb8c8017d92be0664f14007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016abdb7c0da0000040300473045022074f434397dc727640eab2f8d930d292499bfb32e9a66d1a6a35fe82183d59458022100fd6fc76932d8c32be745d12f857a55f186451789c7b52dc5b5657fc47543d8b9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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