www.bmwgroup.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:26:65:65:bb:52:8d:67:72:41:76:17:45:a8:fc:05:c2:5d was issued on by Let's Encrypt.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bmwgroup.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:26:65:65:bb:52:8d:67:72:41:76:17:45:a8:fc:05:c2:5d
Serial Number (int): 274402367987184457726567301364068227859037
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2a:e2:7f:9f:da:5e:aa:94:0d:da:01:88:cb:1d:66:8d:e9:64:f9:76
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 0c:52:97:0f:69:75:18:f6:59:a9:14:d3:6f:06:f3:e9:5c:59:59:b4
Fingerprint (sha256): 01:b9:8e:56:57:48:b1:3c:8b:3b:0b:76:a1:8d:a7:7b:b1:78:0d:df:c7:9c:4f:9c:18:97:aa:4b:8f:42:6c:af

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bmwgroup.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmwgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

approval-bmwgroup-websites.bmw.com
bmwgroup.com
bmwgroup.jobs
bmwmuseumapp.bmwgroup.com
einvoicing.bmwgroup.com
sig.bmwgroup.com
ww1.approval-bmwgroup-websites.bmw.com
ww1.bmw-drivingexperience.com
ww1.bmw-welt.com
ww1.bmwgroup-classic.com
ww1.bmwgroup-plants.com
ww1.bmwgroup-werke.com
ww1.bmwgroup.at
ww1.bmwgroup.com
ww1.bmwgroup.jobs
ww1.bmwmuseumapp.bmwgroup.com
ww1.einvoicing.bmwgroup.com
ww1.powertrain.bmwgroup.com
ww1.sig.bmwgroup.com
ww1.summerschool.bmw
www.bmw-drivingexperience.com
www.bmw-welt.com
www.bmwgroup-classic.com
www.bmwgroup-plants.com
www.bmwgroup-werke.com
www.bmwgroup.at
www.bmwgroup.com
www.bmwgroup.jobs
www.powertrain.bmwgroup.com
www.summerschool.bmw

Other certificates including the domain name bmwgroup.com

(limited to 100 certificates)
cosy-int.bmwgroup.com
cuvedat.bmwgroup.com
bsi-service-wen.bmwgroup.com
ebest-gf5-int2.bmwgroup.com
spa-int.sfchina.bmw.com.cn
myair-bdr-us.bmwgroup.com
mein-test.bmwgroup.com
air-int.bmwgroup.com
api.mobilitygraph.bmwgroup.com
e4ni3.bmwgroup.com
drift.bmwgroup.com
sgate2-int-apac.bmwgroup.com
p44-tracking-data-prod.bmwgroup.com
wissensfinder.bmwgroup.com
sparc-int.bmwgroup.com
e-180.com
df3test-bmwinfobahn.bmwgroup.com
lcs-int.bmwgroup.com
apisec.bmwgroup.com
srpmm-api-i.bmwgroup.com
ispanext-user-int-gf4.bmwgroup.com
rwebmeter.bmwgroup.com
aida-i.bmwgroup.com
nachhaltigkeit-newsletter.bmwgroup.com
dealerportalsg-int.bmwgroup.com
zadea-i.bmwgroup.com
spoa-int-2.bmwgroup.com
h5vco-bmw-test.bmwgroup.com
swg-mx.bmwgroup.com
uat-infobahn.bmwgroup.com
alscore-int.bmwgroup.com
dfegateway-i2.bmwgroup.com
csp-gft.bmwgroup.com
carver.bmwgroup.com
dealerservices-t.bmwgroup.com
tmsi-i.bmwgroup.com
osm-cloud-uat-kr.bmwgroup.com
vcs-gf4-t.bmwgroup.com
stabi.bmwgroup.com
h5vco.bmwgroup.com
plw-prod1.bmwgroup.com
h5vco-int.bmwgroup.com
osm-cloud-int-fed-eu.bmwgroup.com
b2dua4.bmwgroup.com
conrecordtest.bmwgroup.com
srmza.bmwgroup.com
ilz-device-qa.bmwgroup.com
passworddev.bmwgroup.com
alclaims-test.bmwgroup.com
ispanext-user-prod-us-ig-weam.bmwgroup.com
zeus-neu.bmwgroup.com
ddaus-p-gf4.bmwgroup.com
cmscn-int.bmwgroup.com
kai-user-qa-eam.bmwgroup.com
topdrive-i.bmwgroup.com
mocu-int.bmwgroup.com
bch.eu-central-1.test.iis.connected.bmw
dealerservices-test.bmwgroup.com
oasis.bmwgroup.com
www.charging.bmwgroup.com
myc-profile-int.bmwgroup.com
dealercockpit-aos.bmwgroup.com
cargo-auth-ddr-int.bmwgroup.com
vcommus.bmwgroup.com
mediapool-i3.bmwgroup.com
alertnowpbf00.bmwgroup.com
acc-fa-be-alph.bmwgroup.com
prod-mybmw-auth.bmwgroup.com
msdcrm365-int.bmwgroup.com
noaifa.bmwgroup.com
eaina-wen-int.bmwgroup.com
infonet3.bmwgroup.com
test.mini-mx.bmwgroup.com
www.bmw.de
trz-device-qa-us.bmwgroup.com
www.bmw.com
fsconnect-int-next.bmwgroup.com
b2dua-int.bmwgroup.com
gqs-i.bmwgroup.com
air-services-qa1-wen-basic.bmwgroup.com
ispanext-device-qa-cn-weam.bmwgroup.com
pita-dev.bmwgroup.com
usp22-test.bmwgroup.com
myair-bdr-qa2.bmwgroup.com
ics.bmwgroup.com
ispanext-user-int-weam.bmwgroup.com
swg-mx.bmwgroup.com
apisec-i.bmwgroup.com
ispanext-user-qa-ig-weam.bmwgroup.com
vcsus-t.bmwgroup.com
uctemeasip02.bmwgroup.net
air-services-b2i-int.bmwgroup.com
crowd-innovation.bmwgroup.com
ivpbg-new.bmwgroup.com
ult-test.bmwgroup.com
portalwe.bmwgroup.com
www.bmwgroup.com
poco-int.bmwgroup.com
warrhealthus-i.bmwgroup.com
rsp-dcomc.bmwgroup.com

Certificate

The complete raw certificate details for www.bmwgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIFjCCBv6gAwIBAgISAyZlZbtSjWdyQXYXRaj8BcJdMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA3MzEwODI3MjJaFw0x
OTEwMjkwODI3MjJaMBsxGTAXBgNVBAMTEHd3dy5ibXdncm91cC5jb20wggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrCB0pd5z9yKp08guf6mIrHAGHbquj
WFxnCjdF5hcb3UfLmHY+WvKjTnobXkHUFwOVtVF31mqKISEmH5DSYGvvKDZQl+jF
De8kIfP36XrH6Oaxjfl1HGMFZyEW617RBxrtxiLM5ncexzZLQSbj12/oTvuEOTzf
dFVfpMQsIiS0UUb/B5xndpGUOtBEkBVM267bM4f2CksdwblBUmwWLoFMP1KeFHDt
hoye1IYpJKZdingpJGkIdg2KKGmuDCOXX/tRKCmSHdM2lD7VsgdeynXFr3WEPg69
V5rIytA/ndX8p8vXIceKeLGtmfaya//jKdVG116E1FXj2sgGSwCDtlB7AgMBAAGj
ggUjMIIFHzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFCrif5/aXqqUDdoBiMsdZo3p
ZPl2MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEB
BGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0
Lm9yZy8wggLYBgNVHREEggLPMIICy4IiYXBwcm92YWwtYm13Z3JvdXAtd2Vic2l0
ZXMuYm13LmNvbYIMYm13Z3JvdXAuY29tgg1ibXdncm91cC5qb2JzghlibXdtdXNl
dW1hcHAuYm13Z3JvdXAuY29tghdlaW52b2ljaW5nLmJtd2dyb3VwLmNvbYIQc2ln
LmJtd2dyb3VwLmNvbYImd3cxLmFwcHJvdmFsLWJtd2dyb3VwLXdlYnNpdGVzLmJt
dy5jb22CHXd3MS5ibXctZHJpdmluZ2V4cGVyaWVuY2UuY29tghB3dzEuYm13LXdl
bHQuY29tghh3dzEuYm13Z3JvdXAtY2xhc3NpYy5jb22CF3d3MS5ibXdncm91cC1w
bGFudHMuY29tghZ3dzEuYm13Z3JvdXAtd2Vya2UuY29tgg93dzEuYm13Z3JvdXAu
YXSCEHd3MS5ibXdncm91cC5jb22CEXd3MS5ibXdncm91cC5qb2Jzgh13dzEuYm13
bXVzZXVtYXBwLmJtd2dyb3VwLmNvbYIbd3cxLmVpbnZvaWNpbmcuYm13Z3JvdXAu
Y29tght3dzEucG93ZXJ0cmFpbi5ibXdncm91cC5jb22CFHd3MS5zaWcuYm13Z3Jv
dXAuY29tghR3dzEuc3VtbWVyc2Nob29sLmJtd4Idd3d3LmJtdy1kcml2aW5nZXhw
ZXJpZW5jZS5jb22CEHd3dy5ibXctd2VsdC5jb22CGHd3dy5ibXdncm91cC1jbGFz
c2ljLmNvbYIXd3d3LmJtd2dyb3VwLXBsYW50cy5jb22CFnd3dy5ibXdncm91cC13
ZXJrZS5jb22CD3d3dy5ibXdncm91cC5hdIIQd3d3LmJtd2dyb3VwLmNvbYIRd3d3
LmJtd2dyb3VwLmpvYnOCG3d3dy5wb3dlcnRyYWluLmJtd2dyb3VwLmNvbYIUd3d3
LnN1bW1lcnNjaG9vbC5ibXcwTAYDVR0gBEUwQzAIBgZngQwBAgEwNwYLKwYBBAGC
3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcw
ggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQDiaUuuJujpQAnohhu2O4PUPuf+dIj7
pI8okwGd3fHb/gAAAWxHWwQXAAAEAwBGMEQCIHlubjP4hj1ExSp4mMW/Jq3o6Ybb
Z2x1hgL+t+UCkpt7AiA2bw3q9rMJxIUeK5V9hlBueLfJcr8WqxJRQ2zdue/32gB2
AGPy283oO8wszwtyhCdXazOkjWF3j711pjixx2hUS9iNAAABbEdbBDsAAAQDAEcw
RQIhAIQttlW7exvUcEPYohPE4v0u5M08E9XltkQzhsxD4YfMAiBGiZEf2bXP4+QY
kZj6qpeAopQOUO4FBgzhPv/Elte+FDANBgkqhkiG9w0BAQsFAAOCAQEAkElksuoo
ATSITmkENx+b0cZ3jCYynihR1YBnrtKPe+IhcoC+TsNwEl0ipBdGR98wrQeHy7UK
g9DuFaMWdSAOTNErf+J2KRbdK55vIMsQ57jhcdpYdyFRs4ozWhJAZNb5P9GNIg4i
ffYRZvw+pCJmVlHMb1X9LXpHrRaM2gp6fq6Gkb5v5WxxRxajZt8odN3rWFvpFnFB
d8p1f4eNeOhVJhF8ygbogTniV7KE60HRbTGorC2ebDEbpOCjqmL2LcFU25ykMZf2
nZpt8dhSIBDBTVKrGYWnozUG84RqSM2Wthm7Ff7Y6q1NK9fJXdZhdjelpXxNnxLZ
6FeoGHlKVoIeQw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqwgdKXec/ciqdPILn+pi
KxwBh26ro1hcZwo3ReYXG91Hy5h2Plryo056G15B1BcDlbVRd9ZqiiEhJh+Q0mBr
7yg2UJfoxQ3vJCHz9+l6x+jmsY35dRxjBWchFute0Qca7cYizOZ3Hsc2S0Em49dv
6E77hDk833RVX6TELCIktFFG/wecZ3aRlDrQRJAVTNuu2zOH9gpLHcG5QVJsFi6B
TD9SnhRw7YaMntSGKSSmXYp4KSRpCHYNiihprgwjl1/7USgpkh3TNpQ+1bIHXsp1
xa91hD4OvVeayMrQP53V/KfL1yHHinixrZn2smv/4ynVRtdehNRV49rIBksAg7ZQ
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 274402367987184457726567301364068227859037
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-31 08:27:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-29 08:27:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmwgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21590751269308211508858068703101945681744606288226625564773648276709087938223351559481746279662992790168059262084438713458815537074264894897590697293810772730105018228417382330826227234032490318463266822661391329497422010244473395952310624629834965729537645959898379737617599111189869946122997120184412680067879704628326124183103323264572770615439280325381141385015709364912718015067356150281668405296073874053356526699342872115149745745529509977406980496561297342799728292544394757626869255263920495370105351923378286569984567654697863106681225471988816420653846101617501927441012932504479836677458395101271896248443
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ae27f9fda5eaa940dda0188cb1d668de964f976
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (719 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'approval-bmwgroup-websites.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwgroup.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwmuseumapp.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'einvoicing.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.approval-bmwgroup-websites.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmw-drivingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmw-welt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup-classic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup-plants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup-werke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwgroup.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.bmwmuseumapp.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.einvoicing.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.powertrain.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.sig.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww1.summerschool.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-drivingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-welt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup-classic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup-plants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup-werke.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroup.jobs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.powertrain.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.summerschool.bmw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c475b041700000403004630440220796e6e33f8863d44c52a7898c5bf26ade8e986db676c758602feb7e502929b7b0220366f0deaf6b309c4851e2b957d86506e78b7c972bf16ab1251436cddb9eff7da00760063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016c475b043b0000040300473045022100842db655bb7b1bd47043d8a213c4e2fd2ee4cd3c13d5e5b6443386cc43e187cc02204689911fd9b5cfe3e4189198faaa9780a2940e50ee05060ce13effc496d7be14
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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