www.bmw.com

Issued by R3

About this certificate

This digital certificate with serial number 03:97:61:ab:0e:ef:64:4f:a1:2e:a9:0e:12:48:41:ff:c1:32 was issued on by Let's Encrypt.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bmw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:97:61:ab:0e:ef:64:4f:a1:2e:a9:0e:12:48:41:ff:c1:32
Serial Number (int): 312849318501616704277353594575757435191602
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: dc:d1:e8:5f:62:70:a3:ad:99:9e:3a:c7:42:97:40:0f:9f:9a:0a:e8
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 55:38:91:f5:a4:8d:4f:45:28:fe:c1:8f:8d:89:87:d1:9a:51:4d:74
Fingerprint (sha256): 02:97:5f:cf:bc:dd:12:2e:08:3c:9d:d4:ee:f7:74:99:52:23:6d:b4:eb:11:fe:ae:f9:92:85:e5:0a:5b:24:78

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bmw.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

au-com.bmw.com
bao.bmwgroup.com
baonline.bmw.com
beta.bmw.com
bmw-drivingexperience.com
bmw-drivingexperience.de
bmw.al
com.bmw.com
con.api.bmw
epaas.bmw.com
infonet3-akamai-int.bmwgroup.com
mitarbeitertickets.bmw-motorsport.com
needanalyzer.api.bmw
shop.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tickets.bmw-motorsport.com
tracy.bmwgroup.com
www.au-com.bmw.com
www.bmw-asia.com
www.bmw-drivingexperience.com
www.bmw-drivingexperience.de
www.bmw-ghana.com
www.bmw-golfsport.com
www.bmw-me.com
www.bmw-motorsport.com
www.bmw-nigeria.com
www.bmw-special-sales.com
www.bmw-yachtsport.com
www.bmw.al
www.bmw.am
www.bmw.bb
www.bmw.bg
www.bmw.bm
www.bmw.bs
www.bmw.by
www.bmw.ca
www.bmw.cc
www.bmw.ch
www.bmw.cl
www.bmw.co.ao
www.bmw.co.cr
www.bmw.co.id
www.bmw.co.jp
www.bmw.co.nz
www.bmw.com
www.bmw.com.ar
www.bmw.com.au
www.bmw.com.bn
www.bmw.com.kh
www.bmw.com.mt
www.bmw.com.my
www.bmw.com.ph
www.bmw.dk
www.bmw.ee
www.bmw.fi
www.bmw.gr
www.bmw.hn
www.bmw.ht
www.bmw.hu
www.bmw.ie
www.bmw.in
www.bmw.lc
www.bmw.lk
www.bmw.lt
www.bmw.lv
www.bmw.ma
www.bmw.mu
www.bmw.no
www.bmw.pl
www.bmw.pt
www.bmw.ro
www.bmw.se
www.bmw.si
www.bmw.sk
www.bmw.sn
www.bmw.sr
www.bmw.tj
www.bmw.tt
www.bmw.uz
www.bmw.vn
www.bmwbkk.de
www.bmwhk.com
www.bmwjamaica.com
www.bmwlat.com
www.bmwmyanmar.com
www.bmwusa.com
www.com.bmw.com
www.tickets.bmw-motorsport.com

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com
www.bmw.com
bmw01.secure.stage.lithium.com
mnomgr-e2e-us.bmw.com
dev.wcmp.bmw
imm-dev2.bmw.com

Certificate

The complete raw certificate details for www.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uM6m91Z86dPZXd10Rsj
2KKJ9C7Wp98pXGUs7B68mxfyuXeRm0E6CK9k15k2s/hV0dcNrfKPjBi2hM+rIH1i
cpKoKI/5kAdym0PYpIBsKUF0uFGIexdbQG9z2HcqELJVy6SIslr7teHCmhX+WvP9
U+lVdHKpiBxpveCOLBTSJnWK42tHenOT1t85zlCGk3BjbPpTFJ87n7M1cstbxw/x
hh+DZ8GzbzaJHFLXdSln8TZac4vThAMqzEKbr0uWxAgDr1qVhELCSv7PCQN4MJzF
eNffHfyvU38YXFPGJFiazYcLBQmje/ljIAvk0VYYi53IoGL9Odj2ipMDk37VbH2I
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312849318501616704277353594575757435191602
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-13 04:59:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-11 04:59:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27127048029637195533972677617265484646039716705145703349652638519122037489136289271257934217712033619750904332948032339281078546352236606560574046440912752640876134838962789005271354391735054516878510434160888569708059256531049111853645817290276234512321943169615032983362885384545225934481581482207870724532257958216798427969693574960899669593729396918553373920812923194730713453961390717770186688065310440496786776092567917098298942068190934868693627571643628879853377614495131491632644963551111613107351665783984053462186836422678401525671963183958721783004493547440049048823144748552595006946797769764111870953647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dcd1e85f6270a3ad999e3ac74297400f9f9a0ae8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'au-com.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bao.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baonline.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-drivingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-drivingexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'com.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaas.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mitarbeitertickets.bmw-motorsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needanalyzer.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tickets.bmw-motorsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracy.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.au-com.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-asia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-drivingexperience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-drivingexperience.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-ghana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-golfsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-motorsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-nigeria.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-special-sales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yachtsport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.am'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.bb'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.bm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.bs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.by'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.ao'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.hn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ht'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.mu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.sr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.tj'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.tt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwhk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwjamaica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwlat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmyanmar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwusa.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.com.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tickets.bmw-motorsport.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000181f6242d70000004030047304502202bd8d29b6209c38e0aa549ab3b6c1ca48663af89c805df417ee12e5e5555e295022100e61cf14b3427da8f561cc78546af40b779ced69721a944917e25f28d11b16c9900770041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000181f6242e5c0000040300483046022100c4725b586a628714b8f1b8ae8018143775c076a1348eec575414d268f97cc7170221009d7a9854392a8738fc775305f73c334cb1dfe491230e8b943ca422d419cbf88f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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