www.fcagroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:0b:d0:c9:09:f0:22:ec:1f:b1:fa:a2:d9:42:4f:79:5d was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.fcagroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:0b:d0:c9:09:f0:22:ec:1f:b1:fa:a2:d9:42:4f:79:5d
Serial Number (int): 278706964091500513312764767438607179807069
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 10:e9:65:75:91:01:f7:6b:71:68:14:06:ed:04:8a:77:f2:53:cd:ab
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): bd:00:17:1e:25:db:20:09:0f:22:ca:e9:33:9b:d1:e0:7e:1e:ab:65
Fingerprint (sha256): b9:d9:cb:2f:83:d7:73:79:3a:b1:b4:12:8b:c0:6d:27:90:93:02:35:d2:4f:f7:c3:97:18:9b:fa:a0:e7:31:2a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.fcagroup.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.fcagroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

carconfigurator.fcagroup.it
cms.fcadealerdigitalprogram.com
co2insight.fiat.com
elum.alfaromeo.com
globalpowertrainreporter.fcagroup.com
otomobil.fiat.com.tr
owners.mopar.eu
powertrainreporter.fiat.com
usedcars.fcagroup.com
vehiclecompetitorsanalysis.fiat.com
www.abarth.at
www.abarth.ch
www.abarth.com
www.abarth.cz
www.abarth.de
www.abarth.es
www.abarth.fr
www.abarth.gr
www.abarth.hu
www.abarth.it
www.abarth.lu
www.abarth.nl
www.abarth.pl
www.abarth.pt
www.abarth.sk
www.abarthbelgium.be
www.abarthbelux.be
www.abarthcars.co.uk
www.abarthcars.se
www.alfaromeo-me.com
www.alfaromeo.at
www.alfaromeo.be
www.alfaromeo.ch
www.alfaromeo.co.ma
www.alfaromeo.co.uk
www.alfaromeo.co.za
www.alfaromeo.com
www.alfaromeo.com.eg
www.alfaromeo.com.tr
www.alfaromeo.cz
www.alfaromeo.de
www.alfaromeo.dk
www.alfaromeo.es
www.alfaromeo.fi
www.alfaromeo.fr
www.alfaromeo.gr
www.alfaromeo.hu
www.alfaromeo.ie
www.alfaromeo.it
www.alfaromeo.lu
www.alfaromeo.nl
www.alfaromeo.no
www.alfaromeo.pl
www.alfaromeo.pt
www.alfaromeo.se
www.alfaromeo.sk
www.alfaromeosrbija.rs
www.fcagroup.com
www.fiat.at
www.fiat.be
www.fiat.ch
www.fiat.cz
www.fiat.gr
www.fiat.hu
www.fiat.ie
www.fiat.lu
www.fiat.nl
www.fiat.pl
www.fiat.pt
www.fiat.sk
www.i-fast.it
www.lancia.es

Other certificates including the domain name fcagroup.com

(limited to 100 certificates)
myidea.fcagroup.com
cert00059-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
talentacquisition-emea-backoffice.fcagroup.com
staging1.fcagroup.com
cert00059-azurecdn.akamaized.net
cert00059-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
www.chrysler.com
niagara-fca-obiee.fcagroup.com
vpnemea1.fcagroup.com
cert00078-azurecdn.akamaized.net
bestandard.fcagroup.com
bestandard-cert.fcagroup.com
500mirrorfamily.fcagroup.com
collab.extra.fcagroup.com
vep.fcagroup.com
cert00057-azurecdn.akamaized.net
www.fcagroup.com
www.test-talentacquisition-emea-backoffice.fcagroup.com
cert00078-azurecdn.akamaized.net
dai.fcagroup.com
auth.contentservices.fcagroup.com
dpromo.abarth.it
cert00062-azurecdn.akamaized.net
fca4dealers.fcagroup.com
cert00059-azurecdn.akamaized.net
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
dpromo.abarth.it
vpnna.fcagroup.com
cert00057-azurecdn.akamaized.net
dcube.emea.fcagroup.com
vpnna.fcagroup.com
cert2.fcagroup.com
test.supplier.nafta.extra.fcagroup.com
www.talentacquisition-emea-backoffice.fcagroup.com
qa.sae.nafta.parts.fcagroup.com
vbgsdc02.usvideo.fcagroup.com
www.fiat.com
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
www.hrreporting.fcagroup.com
lmm.fcagroup.com
cert00057-azurecdn.akamaized.net
cert00059-azurecdn.akamaized.net
mosetoapm.fcagroup.com
cert00059-azurecdn.akamaized.net
DSS-PRD.intra.fcagroup.com
cert00078-azurecdn.akamaized.net
www.fiat.com
cert00057-azurecdn.akamaized.net
wf-fornitori-codesign-cert.extra.fcagroup.com
cert00057-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
vpnemea-external.fcagroup.com
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
aemstagems4-connect.alfaromeo.com
wifiguest-emea-sponsor.intra.fcagroup.com
customerportal.services.fcab.fcagroup.com
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
bestandard-cert.fcagroup.com
home.bdwh.qliksense.fcagroup.com
careers.fcagroup.com
abarth.pt
lyncaccess01.emea.fcagroup.com
cert00078-azurecdn.akamaized.net
ihubstage.extra.fcagroup.com
q-mysite.emea.fcagroup.com
cert00078-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
cert00078-azurecdn.akamaized.net
officewebapps01.emea.fcagroup.com
www.fcagroup.com
user.fcagroup.com
splirt-cert.intra.fcagroup.com
cert00059-azurecdn.akamaized.net
lyncmedpool01.emea.fcagroup.com
gl-groups-mgmt.fcagroup.com
cert00057-azurecdn.akamaized.net
auth.prod-easydrive.fcagroup.com
qlikia.intra.fcagroup.com
K2.nafta.extra.fcagroup.com
www.fcagroup.com
cert00059-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
dpromo.abarth.it
www.talentacquisition-emea-backoffice.fcagroup.com
cert00057-azurecdn.akamaized.net
cert00059-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
cert00096-azurecdn.akamaized.net
cert00057-azurecdn.akamaized.net
home.qliksense.fcagroup.com
cert00057-azurecdn.akamaized.net

Certificate

The complete raw certificate details for www.fcagroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mEOPhRysmz1TNudN4oc
bMJikpR2kGFhH/yj1rUp2BviL7LNo5i34ZyP8zamBq9RwTEhgRafmGE0sPfKDG6b
Aq3G04Fr7KIIK/GpWigLtGnLnYmrTCFZH9LJuhfp01GrctTqBzuIsBN2w3Yx3Hvz
31yHCC8o0v9YVKfJHnpwjH8vL2NQvPNuDYXfsZ5tZXKckWyVd98IF0FD8gpVTVgY
eRLj9u9uxk+/ZdfnBSyt1tIm2DO7NzttQLnDJT49OAZEbR5CQQw10K72P0uTKAZs
QbCA1AitzqkYa+dhWQgGJ2yVry8kn+55Jf5Bdy1InVSH5f5grljft0YYx/2d28vP
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278706964091500513312764767438607179807069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-07 10:12:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-05 10:12:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.fcagroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26557903960137845260911634087617805693910241776371723306246941801484139008125661008748890277270355245362339155972303138357667626777703037166355045766381932335337116953175124380627624864424414446475032864993661962341079083275677032320177201840375738135069481482592071334223851322416584194206548088039437013874542317318544328896310989906243795130824804313514027494269954161897394695090200196296306917911000091191277881368753444049376030421389313434471269304493877252169027080635182020370434359655263614369177715843002671179403423835769187768218754780113868762057181789045294806952700539872806156850070772408260072558543
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10e965759101f76b71681406ed048a77f253cdab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1319 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carconfigurator.fcagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.fcadealerdigitalprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'co2insight.fiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elum.alfaromeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'globalpowertrainreporter.fcagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'otomobil.fiat.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.mopar.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'powertrainreporter.fiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usedcars.fcagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vehiclecompetitorsanalysis.fiat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarth.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarthbelgium.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarthbelux.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarthcars.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abarthcars.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.co.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeo.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alfaromeosrbija.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fcagroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-fast.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lancia.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700c1164ae0a772d2d4392dc80ac10770d4f0c49bde991a4840c1fa075164f6336000000165141707080000040300483046022100ab507f6a50b692141bd8a9be31f6d199a5af83e34ef1ff95878d0e99dcaff96c022100e62de06c4509847bbfb2170fb2b028e198990007be6f6a53c06cbe206440faae007500293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016514170733000004030046304402200936dbf4c07f919b15b75747e1fd156e3abb9a4d68f2339c1de92c913dca2b1702204c1aa93af638256bd916defcb83c13fc608c0bdcf4bc4f5b11878c3dfe71be63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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