prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
Issued by R3
About this certificate
This digital certificate with serial number 04:9d:af:ec:ef:0d:fc:c7:36:8c:3b:36:d0:fc:ef:e7:8b:f4 was issued on by Let's Encrypt.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:9d:af:ec:ef:0d:fc:c7:36:8c:3b:36:d0:fc:ef:e7:8b:f4Serial Number (int): 402107320463553392289066261862996488195060
Serial Number lenght: 139 bits, 18 octets
SubjectKeyId: d3:3f:00:23:3f:ea:58:2b:b6:f2:bd:ac:4b:98:86:13:07:d7:6c:e2
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6
Fingerprint (sha1): 52:d3:64:ab:0a:0d:05:87:84:68:b5:96:53:66:35:8b:d4:55:44:da
Fingerprint (sha256): 04:73:88:3e:bb:4d:46:1c:f0:99:92:a5:b3:aa:67:bd:ef:33:ad:a3:35:40:ba:8f:40:9c:79:f2:1f:c9:f3:65
Issuing Certificate URL: http://r3.i.lencr.org/
Revocation information
OCSP Server: http://r3.o.lencr.orgCheck the revocation status for certificate prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
Other certificates including the domain name bmw.com.cn
(limited to 100 certificates)
ssl3.chinanetcenter.com
spa-int.sfchina.bmw.com.cn
dashboard.cn-north-1.prod.cub-cn.cv.bmw.com.cn
prom-hlth.cn-north-1.e2e.esim-cn.cv.bmw.com.cn
kbs-test.bmw.com.cn
ssl.chinanetcenter.com
amgr-hlth.cn-north-1.prod.ai-lab-cn.cv.bmw.com.cn
h5vco-bmw-test.bmwgroup.com
omcpaas-int.bmw.com.cn
omccdn.bmw.com.cn
h5vco.bmwgroup.com
h5vco-int.bmwgroup.com
ssl3.chinanetcenter.com
amgr-hlth.cn-north-1.e2e.con-nav-cn.cv.bmw.com.cn
cdhxpd4.api-dev.data.bmw.com.cn
dev.omccdn.bmw.com.cn
prom-hlth.cn-north-1.e2e.rs-cn.cv.bmw.com.cn
ssl3.chinanetcenter.com
gitops.cn-north-1.int.mjapp-cn.cv.bmw.com.cn
ipabotwg-prod.bmw.com.cn
www.bmw.com.cn
origin-cncms.bmw.com.cn
dna.sfchina.bmw.com.cn
amgr-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
h5vco.bmwgroup.com
motorradapp.bmw.com.cn
h5vco.bmwgroup.com
cdn.e2e.android-app-distribution.bmw.com.cn
prometheus.cn-north-1.e2e.mybmw-cn.cv.bmw.com.cn
dna-uat.sfchina.bmw.com.cn
prportal.bmw.com.cn
whispers-dev.bmw.com.cn
ssl3.chinanetcenter.com
prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
h5vco-int.bmw.com.cn
www.chinacache.com
cncms-int.bmw.com.cn
dashboard.cn-north-1.e2e.iis-cn.cv.bmw.com.cn
test.dealermobile.bmw.com.cn
dwh-i.bmw.com.cn
securecn.scene7.com
ipabotwg-stg.bmw.com.cn
amgr-hlth.cn-north-1.e2e.amlcm-cn.cv.bmw.com.cn
dac.bmw.com.cn
dashboard.cn-north-1.test.mjapp-cn.cv.bmw.com.cn
smsuat.bmw.com.cn
securecn.scene7.com
motor-digitalprod2.bmw-motorrad.com.cn
ibs.bmw.com.cn
apps.dealerportal.bmw.com.cn
webssl2.chinanetcenter.com
api.los.prod.aws.bmw.com.cn
dashboard.cn-north-1.prod.msgsvc-cn.cv.bmw.com.cn
amgr-hlth.cn-north-1.e2e.vos-cn.cv.bmw.com.cn
cdhxppl.api-dev.data.bmw.com.cn
ssl3.chinanetcenter.com
amgr-hlth.cn-north-1.int.amlcm-cn.cv.bmw.com.cn
whispers.bmw.com.cn
prodapi.dealermobile.bmw.com.cn
app.bmw.com.cn
spa-test.sfchina.bmw.com.cn
dashboard.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
h5vco-test.bmwgroup.com
dashboard.cn-north-1.test.mjapp-cn.cv.bmw.com.cn
motorradqxsh.bmw.com.cn
origin-cncms-int.bmw.com.cn
metrics.cn-north-1.e2e.iis-cn.cv.bmw.com.cn
h5vco.bmwgroup.com
amgr-hlth.cn-north-1.prod.mjapp-cn.cv.bmw.com.cn
metrics.cn-north-1.e2e.cdse-cn.cv.bmw.com.cn
tlpcloud.bmw.com.cn
prom-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
ssl.chinanetcenter.com
cfs-prod.sfchina.bmw.com.cn
prom-hlth.cn-north-1.prod.vis-cn.cv.bmw.com.cn
dashboard.cn-north-1.prod.esim-cn.cv.bmw.com.cn
dfe-sit.sfchina.bmw.com.cn
prom-hlth.cn-north-1.e2e.skynet-cn.cv.bmw.com.cn
assessmentcentre.bmw.com.cn
cncms2-int.bmw.com.cn
ssl3.chinanetcenter.com
metrics.cn-north-1.prod.vdc-cn.cv.bmw.com.cn
dst.omcvodcdn.bmw.com.cn
bmwusedcar-int.bmw.com.cn
metrics.cn-north-1.test.bonwea-cn.cv.bmw.com.cn
securescn.scene7.com
ssl3.chinanetcenter.com
h5vco.bmwgroup.com
assessmentcentre.bmw.com.cn
prom-hlth.cn-north-1.e2e.cub-cn.cv.bmw.com.cn
bmwnewcar-int-b.bmw.com.cn
emall-int.bmw.com.cn
kbs.bmw.com.cn
Finance-SIT.sfchina.bmw.com.cn
amgr-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
dashboard.cn-north-1.test.ipa-backend-cn.cv.bmw.com.cn
securecn.scene7.com
ssl3.chinanetcenter.com
clms-int.bmw.com.cn
hello-world.cn-north-1.e2e.swca-cn.cv.bmw.com.cn
spa-int.sfchina.bmw.com.cn
dashboard.cn-north-1.prod.cub-cn.cv.bmw.com.cn
prom-hlth.cn-north-1.e2e.esim-cn.cv.bmw.com.cn
kbs-test.bmw.com.cn
ssl.chinanetcenter.com
amgr-hlth.cn-north-1.prod.ai-lab-cn.cv.bmw.com.cn
h5vco-bmw-test.bmwgroup.com
omcpaas-int.bmw.com.cn
omccdn.bmw.com.cn
h5vco.bmwgroup.com
h5vco-int.bmwgroup.com
ssl3.chinanetcenter.com
amgr-hlth.cn-north-1.e2e.con-nav-cn.cv.bmw.com.cn
cdhxpd4.api-dev.data.bmw.com.cn
dev.omccdn.bmw.com.cn
prom-hlth.cn-north-1.e2e.rs-cn.cv.bmw.com.cn
ssl3.chinanetcenter.com
gitops.cn-north-1.int.mjapp-cn.cv.bmw.com.cn
ipabotwg-prod.bmw.com.cn
www.bmw.com.cn
origin-cncms.bmw.com.cn
dna.sfchina.bmw.com.cn
amgr-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
h5vco.bmwgroup.com
motorradapp.bmw.com.cn
h5vco.bmwgroup.com
cdn.e2e.android-app-distribution.bmw.com.cn
prometheus.cn-north-1.e2e.mybmw-cn.cv.bmw.com.cn
dna-uat.sfchina.bmw.com.cn
prportal.bmw.com.cn
whispers-dev.bmw.com.cn
ssl3.chinanetcenter.com
prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
h5vco-int.bmw.com.cn
www.chinacache.com
cncms-int.bmw.com.cn
dashboard.cn-north-1.e2e.iis-cn.cv.bmw.com.cn
test.dealermobile.bmw.com.cn
dwh-i.bmw.com.cn
securecn.scene7.com
ipabotwg-stg.bmw.com.cn
amgr-hlth.cn-north-1.e2e.amlcm-cn.cv.bmw.com.cn
dac.bmw.com.cn
dashboard.cn-north-1.test.mjapp-cn.cv.bmw.com.cn
smsuat.bmw.com.cn
securecn.scene7.com
motor-digitalprod2.bmw-motorrad.com.cn
ibs.bmw.com.cn
apps.dealerportal.bmw.com.cn
webssl2.chinanetcenter.com
api.los.prod.aws.bmw.com.cn
dashboard.cn-north-1.prod.msgsvc-cn.cv.bmw.com.cn
amgr-hlth.cn-north-1.e2e.vos-cn.cv.bmw.com.cn
cdhxppl.api-dev.data.bmw.com.cn
ssl3.chinanetcenter.com
amgr-hlth.cn-north-1.int.amlcm-cn.cv.bmw.com.cn
whispers.bmw.com.cn
prodapi.dealermobile.bmw.com.cn
app.bmw.com.cn
spa-test.sfchina.bmw.com.cn
dashboard.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn
h5vco-test.bmwgroup.com
dashboard.cn-north-1.test.mjapp-cn.cv.bmw.com.cn
motorradqxsh.bmw.com.cn
origin-cncms-int.bmw.com.cn
metrics.cn-north-1.e2e.iis-cn.cv.bmw.com.cn
h5vco.bmwgroup.com
amgr-hlth.cn-north-1.prod.mjapp-cn.cv.bmw.com.cn
metrics.cn-north-1.e2e.cdse-cn.cv.bmw.com.cn
tlpcloud.bmw.com.cn
prom-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
ssl.chinanetcenter.com
cfs-prod.sfchina.bmw.com.cn
prom-hlth.cn-north-1.prod.vis-cn.cv.bmw.com.cn
dashboard.cn-north-1.prod.esim-cn.cv.bmw.com.cn
dfe-sit.sfchina.bmw.com.cn
prom-hlth.cn-north-1.e2e.skynet-cn.cv.bmw.com.cn
assessmentcentre.bmw.com.cn
cncms2-int.bmw.com.cn
ssl3.chinanetcenter.com
metrics.cn-north-1.prod.vdc-cn.cv.bmw.com.cn
dst.omcvodcdn.bmw.com.cn
bmwusedcar-int.bmw.com.cn
metrics.cn-north-1.test.bonwea-cn.cv.bmw.com.cn
securescn.scene7.com
ssl3.chinanetcenter.com
h5vco.bmwgroup.com
assessmentcentre.bmw.com.cn
prom-hlth.cn-north-1.e2e.cub-cn.cv.bmw.com.cn
bmwnewcar-int-b.bmw.com.cn
emall-int.bmw.com.cn
kbs.bmw.com.cn
Finance-SIT.sfchina.bmw.com.cn
amgr-hlth.cn-north-1.int.asbc-cn.cv.bmw.com.cn
dashboard.cn-north-1.test.ipa-backend-cn.cv.bmw.com.cn
securecn.scene7.com
ssl3.chinanetcenter.com
clms-int.bmw.com.cn
hello-world.cn-north-1.e2e.swca-cn.cv.bmw.com.cn
Certificate
The complete raw certificate details for prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcTCCBFmgAwIBAgISBJ2v7O8N/Mc2jDs20Pzv54v0MA0GCSqGSIb3DQEBCwUA MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD EwJSMzAeFw0yMzA2MDgwODA4MDJaFw0yMzA5MDYwODA4MDFaMEExPzA9BgNVBAMT NnByb20taGx0aC5jbi1ub3J0aC0xLnByb2QuaXBhLWJhY2tlbmQtY24uY3YuYm13 LmNvbS5jbjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAP6Hn+PErQnv DOF4BHc4rnKbPDV4goVMe/4X/Jv6Ggy3kFQaUP9iEDeWBLZG9miqJ4rGoc2vx0ly TcdJPoArRrHC24CJEgtPplZ4vYC7RyC8Cjtgbd8YIbLfsccjnjW2xVll1QomyryT xZW0f6oFaeqEid/YKQJOU9tWXKibODl44zpGwHB+NHE7otJYrwqoucZ2dH/7rh5P uhyJq9k9XQEtZFI3ziA95mdR1drrSO+WFFSiJlpE9xvE9tn1KkkD9aDmi6M8cNWD C6Iyu4ytSVDGgpexkP/O44ouy9k3hpRGxH+wq4H2Gp9ZmTTHGW8/oW0apRckvCEh +SCOpmXDPFECAwEAAaOCAnAwggJsMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU0z8A Iz/qWCu28r2sS5iGEwfXbOIwHwYDVR0jBBgwFoAUFC6zF7dYVsuuUAlA5h+vnYsU wsYwVQYIKwYBBQUHAQEESTBHMCEGCCsGAQUFBzABhhVodHRwOi8vcjMuby5sZW5j ci5vcmcwIgYIKwYBBQUHMAKGFmh0dHA6Ly9yMy5pLmxlbmNyLm9yZy8wQQYDVR0R BDowOII2cHJvbS1obHRoLmNuLW5vcnRoLTEucHJvZC5pcGEtYmFja2VuZC1jbi5j di5ibXcuY29tLmNuMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEB MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYK KwYBBAHWeQIEAgSB9ASB8QDvAHYAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0J gSXttJkAAAGImkNQpwAABAMARzBFAiBjdCaZ0FJ91FKf5dJIIbENDtmUaUgB2jAz Vh8IgBD0wwIhAIMfcvNWUdv4wjk+WN3VRKDi77ZBrIjXKTpXYrI0YDruAHUA6D7Q 2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGImkNQngAABAMARjBEAiAu hyooi1kXfRibZksLDQKAh69Lqb9jIDR1n3SomYAGIwIgZMXw7SQztVp7IhZiBz33 CJU1hHUATnv3efPhyfDcAZ0wDQYJKoZIhvcNAQELBQADggEBAG6e7LbFvOTsjvz/ hmkMIxRxTNjepoOtSIXkdxj80nbaEEs2MNoj/U5nv1c1lerIgLGP/2Ays3/v48SE o6N59zkL9I1/U7bjIvhv09VTQeNdgJA71rzZ/d1Wpjh/SpWzziWOQN/HvPNdvdsY IDMb/h22CTDCBFPFQt2vQCKTC+/6HIYlqulsWv1ESFx8JF+RrkwonrP05LqKC4m1 DDpzKMe4v1LSkEPpTkgpEAxz2wnsFTyNv9bJm9d7OiZBqyxWImrha6/yQQmwNUpN GmUNVX37FfnXfSTu6myl5h85sPPWtXvAIsNQ4nx7fPc0jNK29m3lzE3/VbVnj5H3 hSO/eHY= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/oef48StCe8M4XgEdziu cps8NXiChUx7/hf8m/oaDLeQVBpQ/2IQN5YEtkb2aKonisahza/HSXJNx0k+gCtG scLbgIkSC0+mVni9gLtHILwKO2Bt3xghst+xxyOeNbbFWWXVCibKvJPFlbR/qgVp 6oSJ39gpAk5T21ZcqJs4OXjjOkbAcH40cTui0livCqi5xnZ0f/uuHk+6HImr2T1d AS1kUjfOID3mZ1HV2utI75YUVKImWkT3G8T22fUqSQP1oOaLozxw1YMLojK7jK1J UMaCl7GQ/87jii7L2TeGlEbEf7CrgfYan1mZNMcZbz+hbRqlFyS8ISH5II6mZcM8 UQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 402107320463553392289066261862996488195060 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-08 08:08:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-06 08:08:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32131408429073505855219473448335116109777921266581948938951782989689615211856682052952146993158811345158005929113438691734575994115924971278151295088365671958267810836794568882531019773900988435266375937155165195598893974277858749313929898416213171988738387860772895970390742051634090913561590455858481720711122475625965494323314556121102437214240968294733282473227983145428547786561396246244822826935068583613786606245580722040352699303432325812680533135672125683665433688077010399764114479516089824301121541359184496474626189884818122461382952655211696800164283946992998039710234648630690280519954374899961587514449 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d33f00233fea582bb6f2bdac4b98861307d76ce2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prom-hlth.cn-north-1.prod.ipa-backend-cn.cv.bmw.com.cn' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001889a4350a70000040300473045022063742699d0527dd4529fe5d24821b10d0ed994694801da3033561f088010f4c3022100831f72f35651dbf8c2393e58ddd544a0e2efb641ac88d7293a5762b234603aee007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001889a43509e000004030046304402202e872a288b59177d189b664b0b0d028087af4ba9bf632034759f74a899800623022064c5f0ed2433b55a7b221662073df70895358475004e7bf779f3e1c9f0dc019d . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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