www.bmw.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1c:e0:e7:3b:29:f0:81:a2:1b:91:79:02:5d:89:c2:7b:42 was issued on by Let's Encrypt.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bmw.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1c:e0:e7:3b:29:f0:81:a2:1b:91:79:02:5d:89:c2:7b:42
Serial Number (int): 271163711760682114015411991526804086225730
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: b5:3a:aa:34:0b:c1:1d:be:b4:5e:32:b0:0b:ec:80:b5:e7:ba:80:25
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b6:bf:87:ca:a6:ef:18:dd:f4:6c:e6:f9:35:7e:18:91:5c:a7:36:bc
Fingerprint (sha256): 0b:dc:ed:d5:ca:3a:3a:bd:8b:ae:7f:7e:d3:e7:6b:da:b9:85:53:c3:3e:86:09:b8:94:e8:0c:fa:c5:2e:64:0c

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bmw.de

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

con.mini.at
cosystatic.bmwgroup.com
dealer.bmw.be
dealer.bmw.lu
dealer.bmw.nl
infonet3-akamai.bmwgroup.com
legacy.bmw.com
m.bmw.at
m.bmw.be
m.bmw.de
m.bmw.es
m.bmw.fr
m.bmw.it
m.bmw.lu
m.bmw.nl
marketsupport.bmw.com
nurzumtest.bmwmagazine.com
qrcode.api.bmw
rsu.bmw.de
static.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api.bmw.com
trunk-config.api.bmw
vision.next100.bmw
wpm.api.bmw
www-int.bmwbkk.de
www.bmw-antilles.fr
www.bmw-bahrain.com
www.bmw-eg.com
www.bmw-iraq.com
www.bmw-jordan.com
www.bmw-lao.la
www.bmw-m.com
www.bmw-mountains.com
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-voli.me
www.bmw-yemen.com
www.bmw.at
www.bmw.az
www.bmw.ba
www.bmw.be
www.bmw.co.il
www.bmw.co.ke
www.bmw.co.kr
www.bmw.co.th
www.bmw.co.za
www.bmw.com.al
www.bmw.com.bo
www.bmw.com.br
www.bmw.com.co
www.bmw.com.cy
www.bmw.com.do
www.bmw.com.ec
www.bmw.com.ge
www.bmw.com.gt
www.bmw.com.ky
www.bmw.com.mk
www.bmw.com.mo
www.bmw.com.mx
www.bmw.com.ni
www.bmw.com.pa
www.bmw.com.pe
www.bmw.com.py
www.bmw.com.sv
www.bmw.com.tr
www.bmw.com.tw
www.bmw.com.uy
www.bmw.com.ve
www.bmw.cw
www.bmw.cz
www.bmw.de
www.bmw.dz
www.bmw.es
www.bmw.fr
www.bmw.hr
www.bmw.is
www.bmw.it
www.bmw.kz
www.bmw.lu
www.bmw.ly
www.bmw.md
www.bmw.nc
www.bmw.nl
www.bmw.ps
www.bmw.re
www.bmw.rs
www.bmw.ua
www.bmwmagazine.com
www.bmwmagazine.de
www.campaigns.mini
www.m1.mulo-dev.com
www.m1.mulo-int.com
www.m1.mulo-ref.com
www.mini.com.hr
www.minicaribbean.com

Other certificates including the domain name bmw.de

(limited to 100 certificates)
www.dialog.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de

Certificate

The complete raw certificate details for www.bmw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6ZWhkz9vMPwBTiFkXVI
LnaRttgxZJ9RB+IEBi5/Na4hm0efgDMwbf45VErBS5t0FLrV+UCyoI4ojJGElw38
kSR8scggbnELSLAGmxA8cFXgOkRL875yNWrpvZZjVB+qG2zB/RRO0f+8kvHK3saa
OpgKsBI1hssveo+rJZZK5ej4E6hIHoV/PK1LD0DXrSfhUTjmlpY+x+2I9bJeFkr5
PPG9lXm7z56BS7Q8+41sN7F6Hq9OWnqNSZU/Uo2jBPWlUMZ5WrGEb3pkEBJOFZX0
jya/zTf34bah1sbwq/ACUVVLWVxxQq8f0QtnKlm+CVnjcZMpCq8K7DVv+HaPE1Pm
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271163711760682114015411991526804086225730
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-09 17:22:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 17:22:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23183634127151630727627300870204828713475520531017779518520879877113567544001026521333459254483843133956901231216906701911775641654650433810145873944466686089230091198440799267280104123926518173485748256332644623708186937400075893934222105143731197464203458486850282891067037915612577942524237278791062579656346905181714747001508891385088916698884401919618143590244538543945450043411073896966342530906112272158628615355512724374358603896187818318546938693059422885388042204824261244611022763579875705709868732376888405702092814457850453623672886160066698003101681403387612303970063304849263676160788040308263568533127
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b53aaa340bc11dbeb45e32b00bec80b5e7ba8025
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1549 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosystatic.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketsupport.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nurzumtest.bmwmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trunk-config.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-eg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-iraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-lao.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-mountains.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-voli.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campaigns.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-dev.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-ref.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minicaribbean.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016833da5334000004030047304502205c10956c77d26c8b638ff59fdb665f1bf5429ef715ba3df0347ddb2b919c06fc022100f80d2ad76e1432b2b98089a7d34774594fd9d0645eb2d1d4a61692063136651900750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016833da532b00000403004630440220464003441d8a5593e4626b51654bec408c31f91e3535b5295d2b286a1eb4a3d002202e4027f46d5190213cd15d7976f7efeca6bf33642d14ac22953d7718dfc36ca1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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