maintenance.mini.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:5a:44:25:fa:61:ed:58:ee:77:d8:93:d7:da:12:6a:93 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:5a:44:25:fa:61:ed:58:ee:77:d8:93:d7:da:12:6a:93
Serial Number (int): 1492258163314408688028754756917606640413331
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 00:bd:f8:b8:6a:f1:83:0f:67:6d:ce:62:b9:b0:19:ab:ef:0b:5a:21
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): c1:1f:c7:9f:b0:66:9d:1f:21:b5:65:e1:8b:e3:8c:36:df:04:8b:31
Fingerprint (sha256): 03:b0:f0:2e:47:17:56:b8:4d:78:4a:06:63:e0:52:5f:d9:8e:19:93:ac:51:d4:90:04:f7:e9:7e:dd:66:95:91

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate maintenance.mini.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for maintenance.mini.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

maintenance.mini.com

Other certificates including the domain name mini.com

(limited to 100 certificates)
con.api.mini
www.mini.com.bo
integ-s-de.mini.com
configure.bmw.com
bmw-int1.com
www.bmw.com
configure.bmw.com
c2b-services-i.bmw.com
UCP14RP.bmw.de
mini-connected-i.mini.com
www.mini.rs
dev.wcmp.bmw
con.api.mini
maintenance.mini.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.mini.com.bo
configure.bmw.com
perso-i.mini.com
configure.mini.com
www.m1.bmw-int6.com
mini-connected-gfius.mini.com
con.api.mini
bmw-int1.com
qa-bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.bmw.com
dev.wcmp.bmw
www.mini.com
www-origin-proda1.bmw.com
con.api.mini
bmw-int1.com
www.bmw.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.com
www.p93.mini.com
www.bmw.de
con.api.mini
www.p93.mini.com
www.mini.rs
prod.34.slot.cdn.salesforce-communities.com
secure.mini.com
bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.com
con.api.mini
bmw-int1.com
www.p93.mini.com
configure.bmw.com
bps.bmw.com
www.bmw.com
configure.mini.com
bmw01.secure.stage.lithium.com
bmw-int1.com
www.mini.com.bo
dev.wcmp.bmw
www.mini.com
mini-next.configure.bmw.cloud
www.bmw.com
www.mini.rs
www.bmw.com
c2b-services-i.mini.com
www.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
bmw01.secure.lithium.com
www.mini.com
www.bmw.com
c2b.mini.com
bmw-int1.com
bmw-int1.com
configure.mini.com
configure.bmw.com
www.mini.com
www.bmw.com
configure.mini.com
mini-connected-i.mini.com
www.bmw.com
int.bmw-connecteddrive.at
bmw-int1.com
mini.configure.bmw.cloud
www.mini.com
configure.bmw.com
dev.wcmp.bmw
www.bmw.de
www.bmw.com
bmw-int1.com
www.m1.bmw-int6.com
bmw-int1.com
qa-bps.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.de
www.bmw.com
www.bmw.com
mini.configure.bmw.cloud
www.mini.com
configure.mini.com

Certificate

The complete raw certificate details for maintenance.mini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4cfgWyISPcekRS9Y6ms
1bLmnaUZbeBzKzHAes7QG9dN6cqjrqMrlnOI0XvVXfZ7+mh0TcXXTrs3LKca6oDZ
59Lb1HVLoNs1KdC6FAlWaBtnlkUxsV6ZuSy5cvO7f/mxeMQ0HoHJky1asoJawV7O
pLVC+9QzxTYbSOimmt7R53MlCWPGQPePGQ0f0nc06eJloNhtKqgRdsIHhiqPJXE3
rQ4JMcHaqQVNSvyshDVznhjxrbUiHj/kv96p34VjxAtnDxfJaP0gpQ+2dEMFsCMD
aYOIq83EYM4HiTp5fC79s5POU+zrlcs56z6PBv61XyPvKfEQTRNnp6ZPEkurnv2K
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492258163314408688028754756917606640413331
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-01 05:51:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-11 07:33:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'maintenance.mini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23673194697177308879180920801303434334292068167449040690645767868645003240829566938013174283731659845853173014419939147442544992453943375491861080129820946509924867518569240388201307859276012275952495946239123047510928670126929985148523414211188433756457738455413326466681339948549374778122474628076763117292128987332488086051087380869495540933193490185281306916682968289794850364474722659649032371403088927511216560994991199887424958034099733458476870449730219691038046398611533699291514131720222841126953932859976947417086624872520272781227251565792129948051544533528389306368904367706650285604214161143980223204043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.mini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00bdf8b86af1830f676dce62b9b019abef0b5a21
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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