dws4.fcagroup.it

Issued by R3

About this certificate

This digital certificate with serial number 03:b5:74:e8:97:73:13:20:89:cf:b2:ba:b9:ea:1d:25:68:44 was issued on by Let's Encrypt.

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dws4.fcagroup.it

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b5:74:e8:97:73:13:20:89:cf:b2:ba:b9:ea:1d:25:68:44
Serial Number (int): 323083364340113840540160192197519644911684
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:f5:8e:03:19:34:9c:20:f8:42:6b:ae:a2:28:cb:47:ac:8a:cc:59
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 40:63:51:8d:58:e4:2b:ab:df:fe:a1:cf:70:ee:d2:36:c6:3e:dd:04
Fingerprint (sha256): e5:fd:c3:cd:7b:b2:ac:dd:93:55:12:6e:45:ff:d6:00:6b:78:87:f2:8b:bc:7d:25:a0:c6:2b:24:1e:3c:c1:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dws4.fcagroup.it

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dws4.fcagroup.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dws4.fcagroup.it
www.ah-fiat-in-garbsen.de
www.ah-kolb.de
www.ah-schmid.de
www.ah-schroeder.de
www.alimotor-fcagroup.es
www.artedo-fcagroup.es
www.asrautohandel.de
www.atb-fca.de
www.auto-kammergruber.de
www.auto-raber.de
www.auto-rainerwernitz.de
www.auto-renckweindel.de
www.autoahrendt.de
www.autoblocher.de
www.autoboehmer.de
www.autobohr.de
www.autoboosgmbh.de
www.autodreilinden.de
www.autodumler.de
www.autodyballa.de
www.autogalerie-heister.de
www.autohaus-kuehn-gmbh.de
www.autohaus-schmalzried.de
www.autohausblank-gehrden.de
www.autohausfritzgmbh.de
www.autohausgresser.de
www.autohausgroebel.de
www.autohaushottgenroth.de
www.autohaushuber-soehne.de
www.autohauskuehne.de
www.autohausruprecht.de
www.autohschmid.de
www.autokoch-gmbh.de
www.autolider.es
www.automares-fcagroup.es
www.automobil-pauli.de
www.automocionmoll-fcagroup.es
www.automoser-gmbh.de
www.automuellermainz.de
www.autopalazzo-stuttgart.de
www.autopoemmerl.de
www.autorallye-fcagroup.es
www.autosalonflensburg.de
www.autoseidel.de
www.autosellmann.de
www.barchetti-fcagroup.it
www.bauerauto.de
www.budmatauto-fiat.pl
www.came-fcagroup.es
www.centrauto-fcagroup.es
www.fca-automobilesfranccomtoises.fr
www.fca-caravenue.fr
www.fca-dellmotors.fr
www.fca-groupe-sagg.fr
www.fca-hellwig-foelster.de
www.fca-moutiersautomobiles-rodez.fr
www.fca-mwauto.pl
www.fca-pa-automobiles.fr
www.fca-pgd.pl
www.fca-tg-auto.fr
www.fiat-acker.de
www.fiat-brass.de
www.fiat-heidenreich.de
www.fiat-rueschkamp.de
www.fiateira-fcagroup.es
www.fiatprofessional-schwabengarage.de
www.fimalaga-fcagroup.es
www.grandiauto-fcagroup.it
www.herrmann-langer-fiat.de
www.hofmann-hofmann-fca.de
www.jeeplille-krystal.fr
www.mavisa-fcagroup.es
www.moll-automobile-koeln.de
www.motordos-fcagroup.es
www.motorvillage-frankfurt-wiesbaden.de
www.nauerz-gruppe-fca.de
www.nietomotor-fcagroup.es
www.nrwgarage-fca.de
www.tallereschinares-fcagroup.es
www.thomaswandscher-gruppe.de
www.woltersnutzfahrzeuge.de

Other certificates including the domain name fcagroup.it

(limited to 100 certificates)
www.fcagroup.com
venditaonline.fcagroup.it
staging2.fcagroup.com
www.fcagroup.com
www.fcagroup.com
carconfigurator.fcagroup.it
www.fcagroup.com
www.fiat.com
carconfigurator.fcagroup.it
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fiat.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
carconfigurator.fcagroup.it
carconfigurator.fcagroup.it
www.fcagroup.com
www.fcagroup.com
dws3.fcagroup.it
www.fcagroup.com
www.fcagroup.com
aemdevms-www.master-it.fcagroup.it
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
carconfigurator.fcagroup.it
staging2.fcagroup.com
www.fcagroup.com
www.fcagroup.com
aemdevms-www.master-it.fcagroup.it
www.fcagroup.com
www.fcagroup.com
dws1.fcagroup.it
www.fcagroup.com
www.fcagroup.com
staging2.fcagroup.com
carconfigurator.fcagroup.it
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
webstore.fcagroup.be
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
aemdevms4-connectivity.alfaromeo.com
www.fcagroup.com
www.fcagroup.com
aemdevms-www.master-it.fcagroup.it
www.fiat.com
dws6.fcagroup.it
www.fcagroup.com
dws1.fcagroup.it
www.fcagroup.com
www.fcagroup.com
www.fcagroup.com
dws4.fcagroup.it
aemdevms-www.master-it.fcagroup.it
www.fcagroup.com
aemdevms-www.master-it.fcagroup.it
carconfigurator.fcagroup.it
www.fcagroup.com
www.fcagroup.com

Certificate

The complete raw certificate details for dws4.fcagroup.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAshML5PlqOmwgYnDSCmKC
IprBljISxLnhmw2MU7hIWYU845ecxCtlqwHiEwub1SXCU2qgMxzmNpWXDMq0IDVh
icC+PNSEsQUUHjIj/eEEEYV18Dzq1qy4YvhjA8dxrJ2huNcgBUS3vh/QQ1RMkT1N
BcXqzETDbShPnosVs9m+xmhI3/+5efUmCxPR8TOJlRZVSfTgZfuuVwzuZtvO9VQH
mocC3lSomVP449bL9kWMH4o0WKV9JKgxOdnsZa02yL5K+2jk1tOn9843d3ouEtQ8
HX/KdsyWCiwKYwmUnlUQ6SCDYstLogO8XaruO7TRUuwxJCH20w0FL62gwOD5mx/x
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 323083364340113840540160192197519644911684
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-18 17:46:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-17 17:46:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dws4.fcagroup.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22479810444727079046474650888156544984424403478030857524781709686762016283049929725537558242636665684483896481413322090197386790262341131426295459453509560663756721142445402989513645359157885415290627590717227075954905244551687118033423830734982410966560413100329252906602335146266983688976729110663552131509079432054092579030113141817967788817580010718864159700449334219996087170727739116496030253818782421026996328241872518704735506723265156956655669391752211420050079255350235613802575974854691769953561290684666224149291353657242935538259898748287830219239786105750643582602776448242219664437205571307835106521541
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9f58e0319349c20f8426baea228cb47ac8acc59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2036 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dws4.fcagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ah-fiat-in-garbsen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ah-kolb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ah-schmid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ah-schroeder.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alimotor-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artedo-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.asrautohandel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atb-fca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto-kammergruber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto-raber.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto-rainerwernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto-renckweindel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoahrendt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoblocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoboehmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autobohr.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoboosgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autodreilinden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autodumler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autodyballa.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autogalerie-heister.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-kuehn-gmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-schmalzried.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohausblank-gehrden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohausfritzgmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohausgresser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohausgroebel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaushottgenroth.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaushuber-soehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohauskuehne.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohausruprecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohschmid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autokoch-gmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autolider.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automares-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automobil-pauli.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automocionmoll-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automoser-gmbh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automuellermainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autopalazzo-stuttgart.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autopoemmerl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autorallye-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autosalonflensburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoseidel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autosellmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.barchetti-fcagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauerauto.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.budmatauto-fiat.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.came-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrauto-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-automobilesfranccomtoises.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-caravenue.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-dellmotors.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-groupe-sagg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-hellwig-foelster.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-moutiersautomobiles-rodez.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-mwauto.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-pa-automobiles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-pgd.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fca-tg-auto.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat-acker.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat-brass.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat-heidenreich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiat-rueschkamp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiateira-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiatprofessional-schwabengarage.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fimalaga-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.grandiauto-fcagroup.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.herrmann-langer-fiat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hofmann-hofmann-fca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jeeplille-krystal.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mavisa-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moll-automobile-koeln.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motordos-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.motorvillage-frankfurt-wiesbaden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nauerz-gruppe-fca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nietomotor-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nrwgarage-fca.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tallereschinares-fcagroup.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thomaswandscher-gruppe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.woltersnutzfahrzeuge.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018c7e3fd8e1000004030047304502210095127cdc7eda5da01a3488b9e85e53a120b0a5c357ea9521d9517375326ba2b202202d765338f84792ae9dbebefe910b89da95be481c298822d58907ff93bcfb357100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c7e3fd972000004030048304602210098b5eccacffd1b6a9c5f3e2f890e4dfc432c4b37930290d24f903f297ae3be0702210085acc5be4360a6d57176e4a1f0efb5c25e97319b80c11f3ea04726838cad8da4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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