ecert-prod01.con-veh.net

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 63:72:74:a3:9b:0d:99:f2:12:a8:71:7e:66:76:0a:7f was issued on by Entrust, Inc..

With 37 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 63:72:74:a3:9b:0d:99:f2:12:a8:71:7e:66:76:0a:7f
Serial Number (int): 132187859146270774731477451179608640127
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b2:95:85:a7:ad:a1:cb:41:2e:e7:a1:25:f2:8d:11:20:32:10:98:e4
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 0a:d1:c1:30:e4:d9:2a:4d:33:42:09:6d:78:eb:17:9d:19:a4:e8:e1
Fingerprint (sha256): d6:7b:53:4f:5c:e5:47:e8:2f:36:47:6f:d0:d1:3e:71:66:61:74:33:64:7b:60:45:40:f2:3e:49:13:89:18:16

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ecert-prod01.con-veh.net

37

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecert-prod01.con-veh.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecert-prod01.con-veh.net
www.ecert-prod01.con-veh.net
carnet.vw.com
www.carnet.vw.com
b-h-m.spc.us00.p.con-veh.net
b-h-m.spc.us01.beta.con-veh.net
b-h-m.spc.us01.pre.con-veh.net
b-h-m.spr.us00.p.con-veh.net
b-h-m.spr.us01.beta.con-veh.net
b-h-m.spr.us01.pre.con-veh.net
b-h-s.dp.us00.p.con-veh.net
b-h-s.dp.us01.beta.con-veh.net
b-h-s.dp.us01.pre.con-veh.net
b-h-s.spc.us00.p.con-veh.net
b-h-s.spc.us01.beta.con-veh.net
b-h-s.spc.us01.pre.con-veh.net
b-h-s.spr.us00.p.con-veh.net
b-h-s.spr.us01.beta.con-veh.net
b-h-s.spr.us01.pre.con-veh.net
i-h-s.dp.us00.p.con-veh.net
i-h-s.dp.us01.beta.con-veh.net
i-h-s.dp.us01.pre.con-veh.net
i-h-s.spc.us00.p.con-veh.net
i-h-s.spc.us01.beta.con-veh.net
i-h-s.spc.us01.pre.con-veh.net
m-h-s.mon.us00.p.con-veh.net
m-h-s.mon.us01.beta.con-veh.net
m-h-s.mon.us01.pre.con-veh.net
w-h-s.app.us00.p.con-veh.net
w-h-s.app.us01.beta.con-veh.net
w-h-s.app.us01.pre.con-veh.net
w-h-s.auth.us00.p.con-veh.net
w-h-s.auth.us01.beta.con-veh.net
w-h-s.auth.us01.pre.con-veh.net
w-h-s.spr.us00.p.con-veh.net
w-h-s.spr.us01.beta.con-veh.net
w-h-s.spr.us01.pre.con-veh.net

Other certificates including the domain name con-veh.net

(limited to 100 certificates)
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-qa01.con-veh.net
carnet-CUBICclient.con-veh.net
ecert-prod01-ca.con-veh.net
carnet-verizonclient.con-veh.net
b-h-m.spc.us00.p.con-veh.net
carnet-verizonclient-qa.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-dev01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-qa01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.int.con-veh.net
carnet-boschclient.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
carnet-boschclient-qa.con-veh.net
ecert-dev01.con-veh.net
carnet-CUBICclient-qa.con-veh.net
b-h-m.spc.us00.int.con-veh.net

Certificate

The complete raw certificate details for ecert-prod01.con-veh.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIL/jCCCuagAwIBAgIQY3J0o5sNmfISqHF+ZnYKfzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MzEwMjYxMjM1NTFaFw0yNDEwMjYxMjM1NTBaMIGAMQswCQYDVQQGEwJVUzERMA8G
A1UECBMITWljaGlnYW4xFTATBgNVBAcTDEF1YnVybiBIaWxsczEkMCIGA1UEChMb
Vm9sa3N3YWdlbiBHcm91cCBvZiBBbWVyaWNhMSEwHwYDVQQDExhlY2VydC1wcm9k
MDEuY29uLXZlaC5uZXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQC6
QW2tMh+5U6jkKsjKFFv2BRqVdO8C9FXKU8kW+TT8KyB0tuqe0fAkNS+K+P52PJIO
JiiAE1pqiyLeUxgjLMHv2BtomyVdJDhH+rw15lY0ZRw9QXmpFiMFj0yURBPuHMbr
R7/LUq6qpf5vneitea/h/YzSX94WW3lNqLm/ZGkOfWk0iPvaQTOyvnp5Y82A907H
jPI7RpUYxwacFrjI6YXHWqr6xx5UcUgpOoiV/PiPP+7fCZ3OjP6LU6wRyP/0IBrl
+SEb7kC0yWoYMYKE+MukUJFykZ/YIkwgIONyjZXsfp7mMynAksXUfwqTzOiCM1WH
nTdrOUAX37WohHVRnQ/0zKwjHdY+5APAbmkFD+s+ZCnYXwgaIjf0fx4mbwpV9eXf
IToMa4c7zNcO+zr3MIJgsKUAew1GRkw0tc4TvfTd9iM1B0IMk/ENzrasyIDKrknF
B6AaXqhp/aDtuGpJeBQotCt7hAF/wgIl8kG9aMe+nN/bjnoFYFGmyYHfOBcC4Sjj
ZZRktp7ECV4nlXPPr3qgKDNxBNqWzBcuOD2xXg4u1cQdv1KDQBPuyaZGE5GXOEft
j19bXoN0FTpniZ1rF55MI/4KWtNlDQsFnV2xWDu8haCacVauI+jzYTV/7vB4qrBi
xeRulyaaVas+ggQ2DnSFmrP0G6wPAkyurMhE2uNFowIDAQABo4IHNjCCBzIwDAYD
VR0TAQH/BAIwADAdBgNVHQ4EFgQUspWFp62hy0Eu56El8o0RIDIQmOQwHwYDVR0j
BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8waAYIKwYBBQUHAQEEXDBaMCMGCCsG
AQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0
cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMDMGA1UdHwQsMCow
KKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmwwggR5BgNV
HREEggRwMIIEbIIYZWNlcnQtcHJvZDAxLmNvbi12ZWgubmV0ghx3d3cuZWNlcnQt
cHJvZDAxLmNvbi12ZWgubmV0gg1jYXJuZXQudncuY29tghF3d3cuY2FybmV0LnZ3
LmNvbYIcYi1oLW0uc3BjLnVzMDAucC5jb24tdmVoLm5ldIIfYi1oLW0uc3BjLnVz
MDEuYmV0YS5jb24tdmVoLm5ldIIeYi1oLW0uc3BjLnVzMDEucHJlLmNvbi12ZWgu
bmV0ghxiLWgtbS5zcHIudXMwMC5wLmNvbi12ZWgubmV0gh9iLWgtbS5zcHIudXMw
MS5iZXRhLmNvbi12ZWgubmV0gh5iLWgtbS5zcHIudXMwMS5wcmUuY29uLXZlaC5u
ZXSCG2ItaC1zLmRwLnVzMDAucC5jb24tdmVoLm5ldIIeYi1oLXMuZHAudXMwMS5i
ZXRhLmNvbi12ZWgubmV0gh1iLWgtcy5kcC51czAxLnByZS5jb24tdmVoLm5ldIIc
Yi1oLXMuc3BjLnVzMDAucC5jb24tdmVoLm5ldIIfYi1oLXMuc3BjLnVzMDEuYmV0
YS5jb24tdmVoLm5ldIIeYi1oLXMuc3BjLnVzMDEucHJlLmNvbi12ZWgubmV0ghxi
LWgtcy5zcHIudXMwMC5wLmNvbi12ZWgubmV0gh9iLWgtcy5zcHIudXMwMS5iZXRh
LmNvbi12ZWgubmV0gh5iLWgtcy5zcHIudXMwMS5wcmUuY29uLXZlaC5uZXSCG2kt
aC1zLmRwLnVzMDAucC5jb24tdmVoLm5ldIIeaS1oLXMuZHAudXMwMS5iZXRhLmNv
bi12ZWgubmV0gh1pLWgtcy5kcC51czAxLnByZS5jb24tdmVoLm5ldIIcaS1oLXMu
c3BjLnVzMDAucC5jb24tdmVoLm5ldIIfaS1oLXMuc3BjLnVzMDEuYmV0YS5jb24t
dmVoLm5ldIIeaS1oLXMuc3BjLnVzMDEucHJlLmNvbi12ZWgubmV0ghxtLWgtcy5t
b24udXMwMC5wLmNvbi12ZWgubmV0gh9tLWgtcy5tb24udXMwMS5iZXRhLmNvbi12
ZWgubmV0gh5tLWgtcy5tb24udXMwMS5wcmUuY29uLXZlaC5uZXSCHHctaC1zLmFw
cC51czAwLnAuY29uLXZlaC5uZXSCH3ctaC1zLmFwcC51czAxLmJldGEuY29uLXZl
aC5uZXSCHnctaC1zLmFwcC51czAxLnByZS5jb24tdmVoLm5ldIIddy1oLXMuYXV0
aC51czAwLnAuY29uLXZlaC5uZXSCIHctaC1zLmF1dGgudXMwMS5iZXRhLmNvbi12
ZWgubmV0gh93LWgtcy5hdXRoLnVzMDEucHJlLmNvbi12ZWgubmV0ghx3LWgtcy5z
cHIudXMwMC5wLmNvbi12ZWgubmV0gh93LWgtcy5zcHIudXMwMS5iZXRhLmNvbi12
ZWgubmV0gh53LWgtcy5zcHIudXMwMS5wcmUuY29uLXZlaC5uZXQwDgYDVR0PAQH/
BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjATBgNVHSAEDDAK
MAgGBmeBDAECAjCCAYAGCisGAQQB1nkCBAIEggFwBIIBbAFqAHcAPxdLT9ciR1iU
HWUchL4NEu2QN38fhWrrwb8ohez4ZG4AAAGLa/vkKwAABAMASDBGAiEA8J7ACsCR
9yahYDSGMEdBWTO+aaiKcUon3BnP7wiJvagCIQDRS1k8T0Xiapm3csAOKKE4YshH
zkBzYd5d8kIWim19swB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb
AAABi2v75CgAAAQDAEgwRgIhAKbapIIb3yLqtNf2QAKrEiQMTtfln7qWHJnXsCF/
K0KqAiEAhgsaTMFDyurjKL/n+CviGPO4mX7ZVX8lg3MOgYT0npoAdgDatr9rP7W2
Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYtr++RDAAAEAwBHMEUCIEvbbuiQ
uuSDmoSDRxY1b6P8PrOQR+NIrMKUzEq61i4bAiEAihjWTm5ORdCRIEM2YrCTzTH5
3cQjn3rik5jG7iQmSu8wDQYJKoZIhvcNAQELBQADggEBAAkaxdGaj2HQUJQfE/C4
0hnZSa+zm69L/chuq5X4aCkyyeu9Pg9BU0wKOidko4wFmCijdtSJUZmOmB/+dwVu
1tbe625BbOXDlO6W63l2fT1ul2Sr1weUGGdJ78I2FYLr+NXTTWQ71Gdf7dOofF44
I1p3H43vSlrjc0/R4BPH0Ni4efFoWBNJE2DuSedF0PvFbf1EWsTAkwLWtzBlcDH7
ID89Py4uh04pQad2+skvVbXI4D/MUat2nl2WPJLnoBG0jqBjYam2h7q6E4HyUbVM
1+p+W7uZ7rTVDPxbHU3W26O7MDXuRWYoB9wuOeMd9HzlQXU0VS24+B8sFUWYJsbA
DB0=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132187859146270774731477451179608640127
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 12:35:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-26 12:35:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecert-prod01.con-veh.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 759856471190355564800833220389289683594573916779092095732450135397208363336855996754766721888915233879572245863047877771473066523396613997837753796984493572624076132300184836357499672810577374277913199310427321326244267395550222354263283159816455110477662408798779576682352621684260875615992399429227661538189532009400719453236729283439351163544282213897495256257898129568635937724822998370355681184986631754893664548633921048378389981630284140055542786751770573116591560837624870755784915415120263089790821611680637398986283110257593301373172480298212417192325472698398495939767973033356504894711023462678754263976397800860879827319752264254414788978223992904057321093846165250169544492253435636501570419711548570211142292185758409638805149199755820141394881247987912072111648147863996841969202954686252794512759489600426307033315567781419140778061743855538869423576507639608152661630826484396727595770124884489518138865777884372456440631057989875084346395485332869867093273876860824375909133742860393201277602267910767672711015458318464234557050671315812722580515620917271725461779820183215953623787930056179286359356081194632804585153224710547367138170117174484115940512662775452754386407419644623029677121358950596398052651779491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b29585a7ada1cb412ee7a125f28d1120321098e4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1136 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecert-prod01.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecert-prod01.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carnet.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carnet.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us01.beta.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us01.pre.con-veh.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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