perso-i.mini.com

- BMW AG -

Issued by TC TrustCenter Class 2 L1 CA XI

About this certificate

This digital certificate with serial number f0:40:00:01:00:02:34:4e:87:94:1f:de:5f:5a was issued on by TC TrustCenter GmbH.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BMW AG

Organization: BMW AG
Organization unit: PKI Services
State / Province: Bayern
Locality: München
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): f0:40:00:01:00:02:34:4e:87:94:1f:de:5f:5a
Serial Number (int): 4872848908486280301555112130535258
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId: 67:a4:c7:67:e7:dd:0a:13:d8:98:7a:54:07:9a:4a:74:a3:db:12:53
AuthorityKeyId: 66:b3:c6:91:f9:b6:cd:b2:5f:9a:37:56:46:0c:e2:6b:d5:b1:7c:b4

Fingerprint (sha1): e1:72:25:0f:30:2c:07:8e:2a:98:83:47:c4:6d:55:75:3d:42:8e:1b
Fingerprint (sha256): 04:a7:2f:26:3a:12:e2:f7:68:4e:1f:a9:2c:c6:56:ea:25:f0:1a:e7:00:b4:df:d2:21:50:eb:85:9a:fd:fb:9a

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt

Revocation information

OCSP Server: http://ocsp.xi.tcclass2-ii.trustcenter.de
CRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl
CRL Distribution Point: ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?

Check the revocation status for certificate perso-i.mini.com

10

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perso-i.mini.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perso-i.mini.com
perso-i.mini.at
perso-i.mini.be
perso-i.mini.ch
perso-i.mini.de
perso-i.mini.es
perso-i.mini.fr
perso-i.mini.it
perso-i.mini.lu
perso-i.mini.nl
[email protected]

Other certificates including the domain name mini.com

(limited to 100 certificates)
con.api.mini
www.mini.com.bo
integ-s-de.mini.com
configure.bmw.com
bmw-int1.com
www.bmw.com
configure.bmw.com
c2b-services-i.bmw.com
UCP14RP.bmw.de
mini-connected-i.mini.com
www.mini.rs
dev.wcmp.bmw
con.api.mini
maintenance.mini.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.mini.com.bo
configure.bmw.com
perso-i.mini.com
configure.mini.com
www.m1.bmw-int6.com
mini-connected-gfius.mini.com
con.api.mini
bmw-int1.com
qa-bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
ssl.mini.com
www.bmw.com
dev.wcmp.bmw
www.mini.com
www-origin-proda1.bmw.com
con.api.mini
bmw-int1.com
www.bmw.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.com
www.p93.mini.com
www.bmw.de
con.api.mini
www.p93.mini.com
www.mini.rs
prod.34.slot.cdn.salesforce-communities.com
secure.mini.com
bps.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.com
con.api.mini
bmw-int1.com
www.p93.mini.com
configure.bmw.com
bps.bmw.com
www.bmw.com
configure.mini.com
bmw01.secure.stage.lithium.com
bmw-int1.com
www.mini.com.bo
dev.wcmp.bmw
www.mini.com
mini-next.configure.bmw.cloud
www.bmw.com
www.mini.rs
www.bmw.com
c2b-services-i.mini.com
www.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
bmw01.secure.lithium.com
www.mini.com
www.bmw.com
c2b.mini.com
bmw-int1.com
bmw-int1.com
configure.mini.com
configure.bmw.com
www.mini.com
www.bmw.com
configure.mini.com
mini-connected-i.mini.com
www.bmw.com
int.bmw-connecteddrive.at
bmw-int1.com
mini.configure.bmw.cloud
www.mini.com
configure.bmw.com
dev.wcmp.bmw
www.bmw.de
www.bmw.com
bmw-int1.com
www.m1.bmw-int6.com
bmw-int1.com
qa-bps.bmw.com
configure.bmw.com
prod.34.slot.cdn.salesforce-communities.com
www.bmw.de
www.bmw.com
www.bmw.com
mini.configure.bmw.cloud
www.mini.com
configure.mini.com

Certificate

The complete raw certificate details for perso-i.mini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxn/Ui4jop9BdL3ISdAeN
j2nRrtlktCg0gfmDeboOulb+cw4K5TlgEy5jQKW0gi4uW2Pm287Y+zQsc6fDIF6Z
xah/q2R78wjizG9E91kt2pro1KR+3xgu/fC4u2MeuLervOdBoOeuYZgo4CEfQBhJ
PasS++vc+xOAnuNeatjiy9+7s0ihFp9Pp+1zgIOKwQ/9nVDQZ7EnqyRmrHoqldnf
kBu6dMSr+R2F2LGzl9d0L9OJnCwq8mOOYOjKSYWBsWI48kgP4rzEteFOuD/UNZIi
ecMND4yGU19KIMZzVko7UrxBGk0Jirk3zckH12H+EgxAk3KmofUBgQPDA1winQuX
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4872848908486280301555112130535258
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-15 18:22:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-15 18:22:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perso-i.mini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25058219830955444632132799559903103877632396052047446851698730141151752277917712798192708407512873222138784244087599073065367964984613092448990131014297787733858807807574193888404288028375689917427100391366026770810262048440577552170098065883708353551186935682368478022900739188057946675720497194701635333291972924121502837945649215143187212403110673996124141897130168325325824376247180661746953243854004696947077592678354122815930045609392097347444063483853655274435497841219719337570559193204724867105007884866532672951320657154671669620607368115034612665702306605933551536459017617090769384098885518521878883047181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.xi.tcclass2-ii.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3c691f9b6cdb25f9a3756460ce26bd5b17cb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							67a4c767e7dd0a13d8987a54079a4a74a3db1253
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perso-i.mini.nl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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