configure.bmw.com

Issued by R3

About this certificate

This digital certificate with serial number 04:1e:f1:9e:c8:6c:a6:79:67:a7:37:12:13:5c:f2:85:9a:9a was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=configure.bmw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1e:f1:9e:c8:6c:a6:79:67:a7:37:12:13:5c:f2:85:9a:9a
Serial Number (int): 358978783129647037281549433705517277354650
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 13:07:6c:dc:4e:75:16:bd:6d:da:a0:2a:65:12:8e:38:7b:78:7f:c2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 67:e9:d2:5b:89:fd:18:71:71:8c:11:ec:b7:cc:f3:0e:5b:35:30:4d
Fingerprint (sha256): 00:ff:37:a0:a2:0c:da:5c:85:9f:38:bb:4c:e4:a9:ba:99:2d:a0:b7:20:16:0e:a2:4f:ff:63:92:14:c9:f6:6b

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate configure.bmw.com

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for configure.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

configure.bmw.at
configure.bmw.be
configure.bmw.bg
configure.bmw.ca
configure.bmw.ch
configure.bmw.cl
configure.bmw.co.id
configure.bmw.co.jp
configure.bmw.co.kr
configure.bmw.co.nz
configure.bmw.co.uk
configure.bmw.co.za
configure.bmw.com
configure.bmw.com.au
configure.bmw.com.br
configure.bmw.com.co
configure.bmw.com.mx
configure.bmw.com.pe
configure.bmw.com.sg
configure.bmw.com.tw
configure.bmw.cz
configure.bmw.de
configure.bmw.dk
configure.bmw.ee
configure.bmw.es
configure.bmw.fi
configure.bmw.fr
configure.bmw.gr
configure.bmw.hu
configure.bmw.ie
configure.bmw.in
configure.bmw.it
configure.bmw.lt
configure.bmw.lu
configure.bmw.lv
configure.bmw.nl
configure.bmw.no
configure.bmw.pl
configure.bmw.pt
configure.bmw.ro
configure.bmw.ru
configure.bmw.se
configure.bmw.si
configure.bmw.sk
configure.mini.at
configure.mini.co.kr
configure.mini.com
configure.mini.com.au
configure.mini.de
configure.mini.es
configure.mini.jp
configure.mini.nl
garage.bmw.be
garage.bmw.co.kr
garage.bmw.co.za
garage.bmw.es
garage.bmw.fr
garage.bmw.it
garage.bmw.nl
garage.mini.at
garage.mini.co.kr
garage.mini.de
garage.mini.es
garage.mini.nl

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com
www.bmw.com

Certificate

The complete raw certificate details for configure.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJxDCCCKygAwIBAgISBB7xnshspnlnpzcSE1zyhZqaMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTAzMTExMDQ1MzlaFw0yMTA2MDkxMDQ1MzlaMBwxGjAYBgNVBAMT
EWNvbmZpZ3VyZS5ibXcuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsjZjMk6UJF8zwKFmdH/4T7ncrZoGoxR6SBA3sRvFohT8+ONs0MjTVxkHoJle
cQPpcjM+zuRn/gUmr0swWYdIlUvIZOi20bq25b7BpTTs8jjw9LZYvzAFeTkIOF2F
gYqfYLUEfn1RzV9H0WasE50hCBBxsCWrIC7C8Fitb5gtfzqDQcLNtcVTtJ/L3k/i
4kafUP31Gb+quLzKhF6ZgzMO2GWhwe3QC9f+gEneJ7k9xg109FCrR7alJ9cX01uZ
nPu3GcQBszx/WmomvqVjGM0G5mVfPbSJVE+60SFG0D18d02Y1BE9e/zXNMmoLQcY
3ALEKwAFC4f3QraUN0fS7/zHkQIDAQABo4IG6DCCBuQwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBQTB2zcTnUWvW3aoCplEo44e3h/wjAfBgNVHSMEGDAWgBQULrMXt1hW
y65QCUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6
Ly9yMy5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iu
b3JnLzCCBLYGA1UdEQSCBK0wggSpghBjb25maWd1cmUuYm13LmF0ghBjb25maWd1
cmUuYm13LmJlghBjb25maWd1cmUuYm13LmJnghBjb25maWd1cmUuYm13LmNhghBj
b25maWd1cmUuYm13LmNoghBjb25maWd1cmUuYm13LmNsghNjb25maWd1cmUuYm13
LmNvLmlkghNjb25maWd1cmUuYm13LmNvLmpwghNjb25maWd1cmUuYm13LmNvLmty
ghNjb25maWd1cmUuYm13LmNvLm56ghNjb25maWd1cmUuYm13LmNvLnVrghNjb25m
aWd1cmUuYm13LmNvLnphghFjb25maWd1cmUuYm13LmNvbYIUY29uZmlndXJlLmJt
dy5jb20uYXWCFGNvbmZpZ3VyZS5ibXcuY29tLmJyghRjb25maWd1cmUuYm13LmNv
bS5jb4IUY29uZmlndXJlLmJtdy5jb20ubXiCFGNvbmZpZ3VyZS5ibXcuY29tLnBl
ghRjb25maWd1cmUuYm13LmNvbS5zZ4IUY29uZmlndXJlLmJtdy5jb20udHeCEGNv
bmZpZ3VyZS5ibXcuY3qCEGNvbmZpZ3VyZS5ibXcuZGWCEGNvbmZpZ3VyZS5ibXcu
ZGuCEGNvbmZpZ3VyZS5ibXcuZWWCEGNvbmZpZ3VyZS5ibXcuZXOCEGNvbmZpZ3Vy
ZS5ibXcuZmmCEGNvbmZpZ3VyZS5ibXcuZnKCEGNvbmZpZ3VyZS5ibXcuZ3KCEGNv
bmZpZ3VyZS5ibXcuaHWCEGNvbmZpZ3VyZS5ibXcuaWWCEGNvbmZpZ3VyZS5ibXcu
aW6CEGNvbmZpZ3VyZS5ibXcuaXSCEGNvbmZpZ3VyZS5ibXcubHSCEGNvbmZpZ3Vy
ZS5ibXcubHWCEGNvbmZpZ3VyZS5ibXcubHaCEGNvbmZpZ3VyZS5ibXcubmyCEGNv
bmZpZ3VyZS5ibXcubm+CEGNvbmZpZ3VyZS5ibXcucGyCEGNvbmZpZ3VyZS5ibXcu
cHSCEGNvbmZpZ3VyZS5ibXcucm+CEGNvbmZpZ3VyZS5ibXcucnWCEGNvbmZpZ3Vy
ZS5ibXcuc2WCEGNvbmZpZ3VyZS5ibXcuc2mCEGNvbmZpZ3VyZS5ibXcuc2uCEWNv
bmZpZ3VyZS5taW5pLmF0ghRjb25maWd1cmUubWluaS5jby5rcoISY29uZmlndXJl
Lm1pbmkuY29tghVjb25maWd1cmUubWluaS5jb20uYXWCEWNvbmZpZ3VyZS5taW5p
LmRlghFjb25maWd1cmUubWluaS5lc4IRY29uZmlndXJlLm1pbmkuanCCEWNvbmZp
Z3VyZS5taW5pLm5sgg1nYXJhZ2UuYm13LmJlghBnYXJhZ2UuYm13LmNvLmtyghBn
YXJhZ2UuYm13LmNvLnphgg1nYXJhZ2UuYm13LmVzgg1nYXJhZ2UuYm13LmZygg1n
YXJhZ2UuYm13Lml0gg1nYXJhZ2UuYm13Lm5sgg5nYXJhZ2UubWluaS5hdIIRZ2Fy
YWdlLm1pbmkuY28ua3KCDmdhcmFnZS5taW5pLmRlgg5nYXJhZ2UubWluaS5lc4IO
Z2FyYWdlLm1pbmkubmwwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC3xMB
AQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwggEE
BgorBgEEAdZ5AgQCBIH1BIHyAPAAdwBc3EOS/uarRUSxXprUVuYQN/vV+kfcoXOU
sl7m9scOygAAAXghG0eUAAAEAwBIMEYCIQD90ncAp5AwDtF4PG4u5BHtgqNat/5q
Tlwqh5gEgUjt6QIhAK8g8YI5NlLxz5TyUuAwnDhPl+c37yiIZp/9HhrQm8cTAHUA
9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF4IRtHfgAABAMARjBE
AiAE/p7j6OeMJLHaOsiMXFWUyQbPShnRSZxxmMV+TwVL5QIgDfyoLvAwUPycgLHg
wPvuD0+4PV06zcqIymgVN3AtEuMwDQYJKoZIhvcNAQELBQADggEBABYTlbS3X9OS
335lIQXvr6MJj+woV2Avwi9zkMZTtbbBQ2l6GNmB6k4ThsfgGUFEnmNxi3lk2Ux5
xbpeHn/3gVnTl/NKaoPyevagzsPUURM3uWcBrQ+hIS8SBMkqTtJPE1uPSoS9rox3
qkSF+e3IcQj5c+C3dD2jIDR3n8aibqznN7Qi9pjot8CF+WoM4p9l8IBpN9JmgcN/
3BIokv/siE9fjSaSLTc8o2+r3VNjGk1RpKep8MRc+5f0TBuI0GGQOCdTybF0OKJW
vqMSGxzotgXhWhwlpAYAxhMaJwCAiNgGdAyF0Vmz61hPvvsDqY9gaTh+yIsJA4nC
5A+KkcSisu8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsjZjMk6UJF8zwKFmdH/4
T7ncrZoGoxR6SBA3sRvFohT8+ONs0MjTVxkHoJlecQPpcjM+zuRn/gUmr0swWYdI
lUvIZOi20bq25b7BpTTs8jjw9LZYvzAFeTkIOF2FgYqfYLUEfn1RzV9H0WasE50h
CBBxsCWrIC7C8Fitb5gtfzqDQcLNtcVTtJ/L3k/i4kafUP31Gb+quLzKhF6ZgzMO
2GWhwe3QC9f+gEneJ7k9xg109FCrR7alJ9cX01uZnPu3GcQBszx/WmomvqVjGM0G
5mVfPbSJVE+60SFG0D18d02Y1BE9e/zXNMmoLQcY3ALEKwAFC4f3QraUN0fS7/zH
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358978783129647037281549433705517277354650
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-11 10:45:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-09 10:45:39 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'configure.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22497237753064316379707014626027994085158409739555000543260563942016954312292872903819808966589374394890756543007150662251303294709632962949427251919148809717391730370935065667137748138721407822868409021808940472644240413713672666947168893747414564898298756024181645046984454629765329352961206196927424155857034698388721586402185047236445971344786320692484607098175517145378016824177595613776298597227083148369318895080022146864592470234176682644572159113091043393935648162643157139982435713945877282935850295618760797579221024176234285588773635481150107811162932329051758135073250674619282007820739008569550321797009
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							13076cdc4e7516bd6ddaa02a65128e387b787fc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1197 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000178211b47940000040300483046022100fdd27700a790300ed1783c6e2ee411ed82a35ab7fe6a4e5c2a8798048148ede9022100af20f182393652f1cf94f252e0309c384f97e737ef2888669ffd1e1ad09bc713007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000178211b477e0000040300463044022004fe9ee3e8e78c24b1da3ac88c5c5594c906cf4a19d1499c7198c57e4f054be502200dfca82ef03050fc9c80b1e0c0fbee0f4fb83d5d3acdca88ca681537702d12e3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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