tis2web.service.gm.com

- General Motors -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 27:0b:d7:d5:77:21:79:99:01:77:d9:22:c5:56:bb:de was issued on by GeoTrust Inc..

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

General Motors

Organization: General Motors
State / Province: Michigan
Locality: Detroit
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:0b:d7:d5:77:21:79:99:01:77:d9:22:c5:56:bb:de
Serial Number (int): 51901384731588187744196775199718685662
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 21:79:80:60:9a:68:8c:b8:cc:fd:9c:e3:f5:1a:db:f7:47:cf:3e:88
Fingerprint (sha256): 54:80:b5:9b:7d:2c:77:fc:73:14:e6:ea:fa:8e:19:2b:87:05:8f:4d:27:9d:58:32:eb:9e:06:5d:fc:66:1c:86

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate tis2web.service.gm.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tis2web.service.gm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.chevrolet.is
www.incharge.jobs
my.opel.ch
m.chevrolet.co.kr
ru.chevrolet.az
gmk.chevrolet.at
m.cadillac.com.mx
wap.gmchina.com
www.opel.mk
ru.chevroletmd.com
gmk.chevrolet.nl
images.gmwp.chevroleteurope.com
www.centerlearning.com
gmk.chevrolet.se
www.gmcard.ca
gmk.chevrolet.de
gmk.chevrolet.co.uk
my.opel.pt
m.buick.com.mx
www.gmarabia.com
my.opel.it
my.opel.pl
images.gmwp.cadillaceurope.com
gmk.chevrolet.es
www.chevrolet.es
www.chevroletfc.com
my.opel.es
www.gmcertified.com
m.gmc.com.mx
my.opel.nl
www.llamadorevisiongm.mx
gmk.chevrolet.lu
rke-recall.chevrolet.co.in
www.gmdealersearch.ca
m.gmdealersearch.ca
m.fr.cadillaccanada.ca
fr.cadillaccanada.ca
vspcognos.autopartners.net
ca-aic.autopartners.net
bch.autopartners.net
mdpi.autopartners.net
aic.autopartners.net
www.chevrolet-ge.com
ru.chevrolet-ge.com
www.chevrolet.gr
gmk.chevrolet.cz
m.fr.buick.ca
fr.buick.ca
gmk.chevrolet.it
m.ye-en.gmcarabia.com
m.ye-ar.gmcarabia.com
www.gmdeliver.com
recalls.gm.ca
www.gm.ca
rappels.gm.ca
www.gmegypt.com
www.chevrolet.com.mt
gmk.fr.chevrolet.ch
gmk.de.chevrolet.ch
my.opel.at
ru.chevrolet-am.com
my.opel.fr
www.concessionnairesgm.ca
m.concessionnairesgm.ca
cdn.sf-01.oboservices.mobi
cdn.sfs.oboservices.mobi
cdn.sfp.oboservices.mobi
www.chevrolet.com.cy
my.opel.de
mmg.opel.de
storage-cdn.static-gm.com
scd-assets-cdn.static-gm.com
ds-assets-cdn.static-gm.com
assets-cdn.static-gm.com
m.fr.chevrolet.ca
fr.chevrolet.ca
gmk.chevrolet.fr
my.opel.ie
fr.gmccanada.ca
m.fr.gmccanada.ca
akamai.mmg.opel2.pprod.e-gm.net
www.sparksocialcity.com
gmk.fr.chevrolet.be
gmk.nl.chevrolet.be
m.chevrolet.com.mx
tis2webpp.service.gm.com
pilotservicespoc.gm.com
oss.pp.gm.com
spongepc.xw.gm.com
tis2web.akamai.gm.com
oss.gm.com
vspcognos.pp.gm.com
tis2webpp.xw.gm.com
t2sintouch.pre.rit.gm.com
spongepc.pp.xw.gm.com
ecom-dam.ext.gm.com
tis2web.service.gm.com

Other certificates including the domain name gm.com

(limited to 100 certificates)
d1mipvmstm002.edc.nam.gm.com
dcmidavmred0599.vra.dev.gm.com
epgidvldcss0016.epga.nam.gm.com
elmpplx.pp.xw.gm.com
dcwipavvdf015.edc.nam.gm.com
richcerttest1234.gm.com
dcmipph02n002.edc.nam.gm.com
www.gmwelcometocanada.ca
ebill.gm.com
my.gm.com
dcmidavadkd0101.vra.dev.gm.com
scsinscsv001-vl1729.scs.lam.gm.com
suricatoz-edc.gm.com
ars.gm.com
mgo-test1-container.gm.com
dcmidavbrd3516.nam.corp.gm.com
matador.gm.com
admin-gig.gm.com
wlsadmins.onstar.gm.com
pbr.gm.com
odnm-uat.gm.com
sduat1.gm.com
tmsii-fast.gm.com
dcmipavvdf014.edc.nam.gm.com
dcmspvmmas002.edc.nam.gm.com
game3-alpha-dev.dev.gm.com
usfwasa0pag01.fwa.mfg.ad.gm.com
manager-br-offers.gm.com
tdcapp30.eur.corp.gm.com
dcwidavbrd2486.nam.corp.gm.com
sabrix.gm.com
dcwitavtold0051.vra.dev.gm.com
dcwipphgrt001.edc.nam.gm.com
dcmidavgpd0690.nam.corp.gm.com
d2mimphxj3001.edc.nam.gm.com
testfinder.gm.com
www.gm.com
*.wpi.gm.com
sapccaip7a01.edc.nam.gm.com
game3-wap.pp.gm.com
epms-utility2.gm.com
ddpco3-staging.marketing.ext.gm.com
dcmidavism0002.epg.nam.gm.com
ptas-test-01.gm.com
gdapsolr-prdw.gm.com
phxsvn.gm.com
dcmitavbrd0100.epga.nam.gm.com
dcwipavemp001.edc.nam.gm.com
USSSHSA0BAU81.SSH.MFG.AD.GM.COM
vdmcorps-na.epg.nam.gm.com
www.cadillac.com
dcwipph14k002.edc.nam.gm.com
alm.gm.com
dcmidph02k002-ci.edc.nam.gm.com
dcwipavsp4001.edc.nam.gm.com
www.autopartners.net
epgidvwbrd1099.epga.nam.gm.com
dcmidavcee010.edc.nam.gm.com
sapupspa01.edc.nam.gm.com
vscms.gm.com
epgidvlcca1165.epga.nam.gm.com
gmeuut1dca.edc.nam.gm.com
testurlpcf.gm.com
wvpptvwpmc011.wvp.nam.gm.com
mobileapp.gm.com
dcmipph05k004.edc.nam.gm.com
pdgipvmgos002.nam.corp.gm.com
vdu-idt2-epgw.onstar.gm.com
dcwipvmdgc003.edc.nam.gm.com
mdpi-test.gm.com
dcmipavcmd009.edc.nam.gm.com
dcwidavtol0599.epg.nam.gm.com
np-idt1-epgw.onstar.gm.com
mgo-test1-container.gm.com
vdu-vval2-epgw.onstar.gm.com
dex.op5wi.gm.com
dcmipavgie004.edca.nam.gm.com
mediaarchiveext.gm.com
dps-portal.pp.gm.com
MPGSTVMTFD001.nam.corp.gm.com
dcwidavgml0201.epg.nam.gm.com
apachelbtestuat.gm.com
arsdevelopment.gm.com
dcmitavcca0189.epg.nam.gm.com
gmnaobitest.pp.gm.com
fwaacisepsn02.fwa.nam.gm.com
g2cars-za-uat.gm.com
epgidvlpsc1097.epga.nam.gm.com
dcwidavdsc0023.epg.nam.gm.com
dcmitavfin0131.epg.nam.gm.com
r5gsi-dit.gm.com
epgidvlpsc1045.epga.nam.gm.com
saiobitest.pp.gm.com
www.gmretiree.com
wpx.gm.com
tonptisepsn02.tny.nam.gm.com
dcwipavtesd0001.vra.dev.gm.com
naowb-devl.gm.com
pub-seg7-prd.gm.com
dcwipvmgif116.edc.nam.gm.com

Certificate

The complete raw certificate details for tis2web.service.gm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzmwbEBHHpO302glTweyj
9oTT3BYHYqSt5fZqXRgxnB8JN7DhX9nTQ4cO8Lny+W8d8lMjGr51g7y7sVTZB7t/
2hy/6kWcJuUnok3iw1R0XoUGdUmXLa+Xh5JasNL5ULM3Q0gG3efeOcaazQJCNsrp
zs441vEmr7rOeJk8dj7tfp6gLc8vMi5BpWBFO2Yl3fKxLDQwPPuTgrJsu3ySsksY
fhddJKvv2uiHmsP5GPjvT7fgj906Ojd0TE3BIu3g2EPgYtonjMhbW2HTtOQru7hc
ShgkYPl0hqW6t7swRDZjnxBHAri1sXYk+Sq2o42u9xIXVTA1IFscbJNOkd9oaPrk
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 51901384731588187744196775199718685662
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Detroit'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'General Motors'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'tis2web.service.gm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26058399737407460894911009202155973579945336285311657476994773020654848911689933136088479720158975525736795132697534320598764051073387162073599810514655615351069388236717202554088004600897140121071676689399984406462901248212362044685653495612846718377927804365662218501869342734159005599750038863905372699688823034972149852991405927246461513969836756353365065960032380464385543453023202764851947853185276861402260190538848932699656243542648323931744300849888347458006309925708722337850840394298068071320249734829186208820496200698576492305880276100606776222093547238775790204490508923217625520194246484341551408014491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1951 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.incharge.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chevrolet.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.chevrolet.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.cadillac.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wap.gmchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.opel.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.chevroletmd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.gmwp.chevroleteurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centerlearning.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcard.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.buick.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.gmwp.cadillaceurope.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevroletfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmcertified.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gmc.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llamadorevisiongm.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rke-recall.chevrolet.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmdealersearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.gmdealersearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fr.cadillaccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.cadillaccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vspcognos.autopartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ca-aic.autopartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bch.autopartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdpi.autopartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aic.autopartners.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet-ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.chevrolet-ge.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fr.buick.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.buick.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ye-en.gmcarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ye-ar.gmcarabia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmdeliver.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recalls.gm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rappels.gm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gmegypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.fr.chevrolet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.de.chevrolet.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ru.chevrolet-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.concessionnairesgm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.concessionnairesgm.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sf-01.oboservices.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sfs.oboservices.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.sfp.oboservices.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chevrolet.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mmg.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storage-cdn.static-gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scd-assets-cdn.static-gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-assets-cdn.static-gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets-cdn.static-gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fr.chevrolet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.chevrolet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.chevrolet.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.gmccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.fr.gmccanada.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.mmg.opel2.pprod.e-gm.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sparksocialcity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.fr.chevrolet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmk.nl.chevrolet.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.chevrolet.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tis2webpp.service.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilotservicespoc.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.pp.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spongepc.xw.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tis2web.akamai.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vspcognos.pp.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tis2webpp.xw.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't2sintouch.pre.rit.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spongepc.pp.xw.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecom-dam.ext.gm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tis2web.service.gm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153be1d43f7000004030046304402205541dae76f6647ff3d58c02ab25d52944753ad846ec4d74211aea8db0c90abef02204584b0d7c4001813536393164880de3c8e88e94941bddf4457721857507b1948007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153be1d44320000040300463044022010b7d0d0d3c1459671d88ecbd8796a04b352151935752a82fa9e5e9e4b47986e0220792b692c482e3b5f585330296cad70a38c4b27d9d0ed3eb128b6da57acc10295
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0074632cc0674d1ab03c3233a9f17e21974eaf6a0c7ac78b2ebf6bbf755a7e9edcbae3bb2ee884df783dad312ce478c946626b553bff3ceaa621ad4da0d83b86cc8c07a2b27d570b1420cf7e2c1c8e91e5e6493f5a48fd05d8e786f10e470f0104effe53aaeb37a179c5b03dc994e05bea01c31dc1b500bbc433e743877c96a68734bce8ab835e6c62254af55b1e1e8eadff3a3fd297cde3f57e6a0bf31e72175f29cca8c3297746e5a0beac0e1477b949d3d5cdaee6e75ff3728345b572dfca10f4ef5b901f7889dd8b93b1652a8c3a81140c9a820358131db201937c65df27106848ba0717d2233386829f33da6f24de68090774b30d77f5e67432e3baddd052