ucemeafrepoolws04.bmwgroup.net

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3c:0e:3b:2f:15:f8:9b:31:4c:4a:dc:5b was issued on by GlobalSign nv-sa.

With 35 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 3c:0e:3b:2f:15:f8:9b:31:4c:4a:dc:5b
Serial Number (int): 18586305038957955610405690459
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 01:1a:b5:d1:34:d9:4b:83:74:5c:ad:8c:db:c7:16:2a:ca:7c:2a:ca
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 40:8b:10:81:23:88:28:f9:b0:19:02:5c:46:31:34:b4:2f:d4:f4:dd
Fingerprint (sha256): 06:ef:40:24:1f:99:36:bd:04:06:1c:aa:c3:25:93:dc:20:9c:43:82:c3:2e:d9:0d:ed:7e:9f:31:3e:85:22:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate ucemeafrepoolws04.bmwgroup.net

35

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ucemeafrepoolws04.bmwgroup.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ucemeafrepoolws04.bmwgroup.net
ucjoin.bgmtest.info
lyncdiscover.bmwgroup.com
lyncdiscover.bmwmcext.com
lyncdiscover.bmwdca.com
lyncdiscover.bmwna.com
lyncdiscover.bmwfs.com
lyncdiscover.bmwnaext.com
lyncdiscover.bmw.com.br
lyncdiscover.bmw.de
lyncdiscover.partner.bmw.de
lyncdiscover.rolls-roycemotorcars.com
lyncdiscover.bmw.co.za
lyncdiscover.bmw-m.com
lyncdiscover.partner.bmw.co.za
lyncdiscover.partner.bmw.com
lyncdiscover.bmw.co.uk
lyncdiscover.bmw.fr
lyncdiscover.alphabet.com
lyncdiscover.bmw.it
lyncdiscover.bmwmc.com
lyncdiscover.bmw.com
lyncdiscover.alphabet.de
lyncdiscover.alphabet.co.uk
lyncdiscover.bmwfinance.ca
lyncdiscover.bgmtest.info
lyncdiscover.partner.bmwgroup.com
ucemeafrepoolws05.bmwgroup.net
ucemeafrepoolws06.bmwgroup.net
ucemeafrepoolws07.bmwgroup.net
ucemeawacpool02.bmwgroup.net
ucemeawacpool03.bmwgroup.net
ucjoin.bmwgroup.net
ucmacp.bmwgroup.net
lyncdiscover.bmwgroup.net

Other certificates including the domain name bmwgroup.net

(limited to 100 certificates)
bip-tool-int.bmwgroup.net
test-infobahn-us.bmwgroup.net
tsp-apac.bmwgroup.net
cc-ts-ts-bs-patchcamp-us-prod.bmwgroup.net
eutolerantmatch-carmen-t.bmwgroup.net
itsm-tdq.bmwgroup.net
cc-conn-vps-admin-cn-inte2e-ui.bmwgroup.net
itssp-gl3-int.bmwgroup.net
cc-conn-nop-archiv-emea-intit.bmwgroup.net
kgs-rpk-r1-prod.bmwgroup.net
netftnoa-int.bmwgroup.net
cc-rcc-lschttpreceiver-us-inte2e.bmwgroup.net
c2btolerant-bip-i.bmwgroup.net
prototype17.bmwgroup.net
codis-t-hn-int.bmwgroup.net
prokkat.bmwgroup.net
klocwork-swf-int.bmwgroup.net
rsp-ofco-int3.bmwgroup.net
ucp-int-sprint-1-cache.bmwgroup.net
bdp1.bmwgroup.net
cc-rcc-rs-us-prod.bmwgroup.net
int-b2vcsfleet.bmwgroup.net
lb-cnap-master.bmwgroup.net
apisec.bmwgroup.com
dmwf-int.bmwgroup.net
digitalshow.bmwgroup.net
rspmatchHDL-i.bmwgroup.net
scc-es.bmwgroup.net
rdecwls12.bmwgroup.net
benefits-p-docker.bmwgroup.net
portalm.bmwgroup.net
liscj01.bmwgroup.net
cc-ts-tsbm-us-inte2e.bmwgroup.net
fms-i-mat.bmwgroup.net
owa.bmwgroup.net
coin-i.bmwgroup.net
ucp-author.bmwgroup.net
dealernet-za.bmwgroup.net
srpnextt-project.bmwgroup.net
cc-nav-ddcrdr-emea-e2e.bmwgroup.net
ucpr-china-test.bmwgroup.net
mapp-int08-gf3.bmwgroup.net
tcmuc-cndmz.bmwgroup.net
dialer-proxy-p.bmwgroup.net
chronos.bmwgroup.net
cdms-lab-proj.bmwgroup.net
mpm-dmsi.bmwgroup.net
rdeckweb-prod.bmwgroup.net
mcib-ingest-prod.bmwgroup.net
oto-ci.bmwgroup.net
etk-test.bmwgroup.net
bobwprod.bmwgroup.net
artifactory.eu-central-1.grafana.ops.cc.bmwgroup.net
dataallocation-proxy-d.bmwgroup.net
aspr.bmwgroup.net
rrcmsdisp-rradmin.bmwgroup.net
employeeportal-es.bmwgroup.net
pmpae.bmwgroup.net
b2vcockpit-cn.bmwgroup.net
csbe-test-gf3.bmwgroup.net
dependency-graph.github-apps.cc-int.bmwgroup.net
fscalculatoreu-t.bmwgroup.net
eagle-int.bmwgroup.net
aem-inta6-disp.bmwgroup.net
itsm-tlp.bmwgroup.net
warrantypmus-t.bmwgroup.net
srd-mig.bmwgroup.net
test-estimatorminiusa-us.bmwgroup.net
lpotdnexus11.bmwgroup.net
bao-admin-int-gfv4.bmwgroup.net
impact-int.bmwgroup.net
tms-prod.bmwgroup.net
pcs-oui5-p02-prod.bmwgroup.net
captain-int.bmwgroup.net
contenthub-de.bmwgroup.net
promt4-ft.bmwgroup.net
h5vco-ux-int.bmwgroup.net
aida-t.bmwgroup.net
asecppi-test.bmwgroup.net
c2b2bmwtest.bmwgroup.net
spotdwh-mi-int4.bmwgroup.net
int-api-manager.bmwgroup.net
gstest20240307c.bmwgroup.net
cc-ts-tsc1-us-inte2e.bmwgroup.net
opctest.bmwgroup.net
ucp-int-uat-2-srvs-access.bmwgroup.net
wls12-t-odm-aol.bmwgroup.net
h5vco-cn-int.bmwgroup.net
aem-pre2-disp.bmwgroup.net
april-device-qa2.bmwgroup.net
ecom-prod.bmwgroup.net
codis-t-hn-2016-int.bmwgroup.net
rema-i4.bmwgroup.net
web-vrs-ml7.bmwgroup.net
servicenet.bmwgroup.net
itsmbao-bgi-t.bmwgroup.net
prod-centralup2drive-us.bmwgroup.net
gwm4-test.bmwgroup.net
intams-t.bmwgroup.net
cs-cs-encrypt-int.bmwgroup.net

Certificate

The complete raw certificate details for ucemeafrepoolws04.bmwgroup.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2q0I6wZqP3+TIfy0Cw6
+6ketl8Pwa2qUiyqj6312SCkyP2iRHyQc8ldqoj8TiAVrm9VgOhUgPX2/13EM8hR
M95Fz0eSSoOYihGS1ckmClpKxZItaNm5QmysM2sgHontq99mqFqzqBX3s9KRHCtO
JfjYq6vlqDGwUPFMSy3vIdEGE/9OO/jE3ajiUKwKVqJiWJT6Z0NocH3mmm6tXWqH
iMWUemFhiFzS8IT2b18po7ULAty3tA7Mbyl7VS5/wD+RKZFmlBkPuBfmXB08w0W3
t15ReWbGIX50hsU5Qsfmv751OXAULEbUBAnpzsuNujBQ15qOUFvi5O/87bLLNTOJ
XwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18586305038957955610405690459
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-06 10:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-09 10:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ucemeafrepoolws04.bmwgroup.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21134414469753895355808954869038092580005007311707861145248545608561731422700694416255761285231733555501051241178363699027071273166351033825618734032540531383582077733771048434659964926741495534120619675070154411369375049271975262558398064888368496958181316237786743745643917429977384409715760116591742213317303811445050066689158324396559594885486286409145720017489510529868426576334818699561454834618066402738647904134463607457303115083258764319966635230159824041728202908947522822254529305965782774762842285759737236104696716747673882343793422368198277809571690434624476547340562794852122921442141210752764674804063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (944 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeafrepoolws04.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucjoin.bgmtest.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwmcext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwdca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwnaext.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.partner.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.rolls-roycemotorcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.partner.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.partner.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.alphabet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwmc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.alphabet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.alphabet.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwfinance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bgmtest.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.partner.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeafrepoolws05.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeafrepoolws06.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeafrepoolws07.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeawacpool02.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucemeawacpool03.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucjoin.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ucmacp.bmwgroup.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.bmwgroup.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							011ab5d134d94b83745cad8cdbc7162aca7c2aca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005e630d74bc6cb86232aad57a0ccbd89a0e63874bac1f628a333b1ec7b16eaca5f1bfbbcdace210f78897e4c39ef832d005673f307c62c1a599826c5126ed405629837d7ecc012458ebdc65a1dd5777ee0bc9d02674f771d4d0e908a54502c2a69314a605e9dc06d0f7018fe656aa9a3ea01f70eee4170ed76c43ab064623b2f4c811491d985f6cd47985667c924c1471d032dadfe5760ffccf87537acc1364ff9695852879692ea484e58c620cda13b2325d856147206aa9601bc1b4c3f6cd5334498c50e87d5ac8249e6eba89293bbcdf3a9664dbf3cce1721ca83eb444ae1cebf3f530442570bd886b22d8a1f50fea0147ccde4c409447bb7d096edb1dc942