www.bmw.de

Issued by R3

About this certificate

This digital certificate with serial number 04:1c:bc:cb:7c:12:9c:1d:c1:f0:a1:96:cb:71:59:7c:97:49 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bmw.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:1c:bc:cb:7c:12:9c:1d:c1:f0:a1:96:cb:71:59:7c:97:49
Serial Number (int): 358228001416790323731884977226523902515017
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 90:77:b7:0e:87:97:1c:bf:e8:46:a2:57:ac:d4:a7:59:9d:8d:5d:02
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 13:cb:ff:84:f0:05:5d:73:b9:69:86:81:a2:40:8b:61:d1:09:9a:2f
Fingerprint (sha256): 0e:d0:89:87:4e:17:cc:43:d5:d2:5b:aa:22:2f:75:62:df:5a:0a:44:15:fc:85:7c:aa:3d:f5:cf:5e:f7:a9:c5

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.bmw.de

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosystatic.bmwgroup.com
dealer.bmw.be
dealer.bmw.lu
dealer.bmw.nl
infonet3-akamai.bmwgroup.com
legacy.bmw.com
qrcode.api.bmw
rsu.bmw.de
static.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api.bmw.com
vision.next100.bmw
wpm.api.bmw
www.bmw-albania.com
www.bmw-antilles.fr
www.bmw-eg.com
www.bmw-egypt.com
www.bmw-kz.com
www.bmw-lao.la
www.bmw-m.com
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-voli.me
www.bmw-yemen.com
www.bmw.at
www.bmw.az
www.bmw.ba
www.bmw.be
www.bmw.ci
www.bmw.co.il
www.bmw.co.ke
www.bmw.co.kr
www.bmw.co.th
www.bmw.co.uk
www.bmw.co.za
www.bmw.com.bd
www.bmw.com.bo
www.bmw.com.br
www.bmw.com.co
www.bmw.com.cy
www.bmw.com.do
www.bmw.com.ec
www.bmw.com.ge
www.bmw.com.gt
www.bmw.com.ky
www.bmw.com.mk
www.bmw.com.mo
www.bmw.com.mx
www.bmw.com.ni
www.bmw.com.pa
www.bmw.com.pe
www.bmw.com.py
www.bmw.com.sg
www.bmw.com.sv
www.bmw.com.tr
www.bmw.com.tw
www.bmw.com.uy
www.bmw.com.ve
www.bmw.cw
www.bmw.cz
www.bmw.de
www.bmw.dz
www.bmw.es
www.bmw.fr
www.bmw.gp
www.bmw.hr
www.bmw.is
www.bmw.it
www.bmw.kg
www.bmw.lu
www.bmw.ly
www.bmw.md
www.bmw.mn
www.bmw.mq
www.bmw.nc
www.bmw.nl
www.bmw.re
www.bmw.rs
www.bmw.tm
www.bmw.tm.dz
www.bmw.ua
www.bmwmagazine.com
www.bmwmagazine.de
www.conntected.bmw-abudhabi.com
www.conntected.bmw-dubai.com
www.conntected.bmw-kuwait.com
www.mini.com.hr

Other certificates including the domain name bmw.de

(limited to 100 certificates)
www.dialog.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de

Certificate

The complete raw certificate details for www.bmw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJqTCCCJGgAwIBAgISBBy8y3wSnB3B8KGWy3FZfJdJMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMTA4MDQxOTUwMDhaFw0yMTExMDIxOTUwMDZaMBUxEzARBgNVBAMT
Cnd3dy5ibXcuZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgKxSn
ucyI1Vql2PZup1xeva/pWeZNxrdzozy64LjqeWVjYa5NP1uDHWASXCzanjSCSx7M
SVSP84ZGEmEplfwTRu+QzdCEzWYGeDys1LijrIbvE94g/+EhrnYbZU6dRtZDI7Xm
dMAIJ8S9e349eB56BWzOsLBdw0QdyWP4AufXg8k8J0yHgFFTD+O8jTS6c+Qo/VHU
IrIRrsGRN5PZVdSyUhc7uWRjLkEY2bK5upOLwCoOyW/zTO+N22d1cFwUzz0A4PHz
AAWRX7Sujhf2nO6wuJ1Q8Fb0lc/I+vXazFp6Sz+0U4ifm5ZSDGwnYI4/dOEkaSQi
iArKN4C+6XfwG6w3AgMBAAGjggbUMIIG0DAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYE
FJB3tw6Hlxy/6EaiV6zUp1mdjV0CMB8GA1UdIwQYMBaAFBQusxe3WFbLrlAJQOYf
r52LFMLGMFUGCCsGAQUFBwEBBEkwRzAhBggrBgEFBQcwAYYVaHR0cDovL3IzLm8u
bGVuY3Iub3JnMCIGCCsGAQUFBzAChhZodHRwOi8vcjMuaS5sZW5jci5vcmcvMIIF
lQYDVR0RBIIFjDCCBYiCF2Nvc3lzdGF0aWMuYm13Z3JvdXAuY29tgg1kZWFsZXIu
Ym13LmJlgg1kZWFsZXIuYm13Lmx1gg1kZWFsZXIuYm13Lm5sghxpbmZvbmV0My1h
a2FtYWkuYm13Z3JvdXAuY29tgg5sZWdhY3kuYm13LmNvbYIOcXJjb2RlLmFwaS5i
bXeCCnJzdS5ibXcuZGWCDnN0YXRpYy5ibXcuY29tgg9zdGF0aWMyLmJtdy5jb22C
D3N0YXRpYzMuYm13LmNvbYIPc3RhdGljNC5ibXcuY29tghR0cmFja2luZy1hcGku
Ym13LmNvbYISdmlzaW9uLm5leHQxMDAuYm13ggt3cG0uYXBpLmJtd4ITd3d3LmJt
dy1hbGJhbmlhLmNvbYITd3d3LmJtdy1hbnRpbGxlcy5mcoIOd3d3LmJtdy1lZy5j
b22CEXd3dy5ibXctZWd5cHQuY29tgg53d3cuYm13LWt6LmNvbYIOd3d3LmJtdy1s
YW8ubGGCDXd3dy5ibXctbS5jb22CEnd3dy5ibXctdGFoaXRpLmNvbYITd3d3LmJt
dy10dW5pc2lhLmNvbYIPd3d3LmJtdy12b2xpLm1lghF3d3cuYm13LXllbWVuLmNv
bYIKd3d3LmJtdy5hdIIKd3d3LmJtdy5heoIKd3d3LmJtdy5iYYIKd3d3LmJtdy5i
ZYIKd3d3LmJtdy5jaYINd3d3LmJtdy5jby5pbIINd3d3LmJtdy5jby5rZYINd3d3
LmJtdy5jby5rcoINd3d3LmJtdy5jby50aIINd3d3LmJtdy5jby51a4INd3d3LmJt
dy5jby56YYIOd3d3LmJtdy5jb20uYmSCDnd3dy5ibXcuY29tLmJvgg53d3cuYm13
LmNvbS5icoIOd3d3LmJtdy5jb20uY2+CDnd3dy5ibXcuY29tLmN5gg53d3cuYm13
LmNvbS5kb4IOd3d3LmJtdy5jb20uZWOCDnd3dy5ibXcuY29tLmdlgg53d3cuYm13
LmNvbS5ndIIOd3d3LmJtdy5jb20ua3mCDnd3dy5ibXcuY29tLm1rgg53d3cuYm13
LmNvbS5tb4IOd3d3LmJtdy5jb20ubXiCDnd3dy5ibXcuY29tLm5pgg53d3cuYm13
LmNvbS5wYYIOd3d3LmJtdy5jb20ucGWCDnd3dy5ibXcuY29tLnB5gg53d3cuYm13
LmNvbS5zZ4IOd3d3LmJtdy5jb20uc3aCDnd3dy5ibXcuY29tLnRygg53d3cuYm13
LmNvbS50d4IOd3d3LmJtdy5jb20udXmCDnd3dy5ibXcuY29tLnZlggp3d3cuYm13
LmN3ggp3d3cuYm13LmN6ggp3d3cuYm13LmRlggp3d3cuYm13LmR6ggp3d3cuYm13
LmVzggp3d3cuYm13LmZyggp3d3cuYm13Lmdwggp3d3cuYm13Lmhyggp3d3cuYm13
Lmlzggp3d3cuYm13Lml0ggp3d3cuYm13Lmtnggp3d3cuYm13Lmx1ggp3d3cuYm13
Lmx5ggp3d3cuYm13Lm1kggp3d3cuYm13Lm1uggp3d3cuYm13Lm1xggp3d3cuYm13
Lm5jggp3d3cuYm13Lm5sggp3d3cuYm13LnJlggp3d3cuYm13LnJzggp3d3cuYm13
LnRtgg13d3cuYm13LnRtLmR6ggp3d3cuYm13LnVhghN3d3cuYm13bWFnYXppbmUu
Y29tghJ3d3cuYm13bWFnYXppbmUuZGWCH3d3dy5jb25udGVjdGVkLmJtdy1hYnVk
aGFiaS5jb22CHHd3dy5jb25udGVjdGVkLmJtdy1kdWJhaS5jb22CHXd3dy5jb25u
dGVjdGVkLmJtdy1rdXdhaXQuY29tgg93d3cubWluaS5jb20uaHIwTAYDVR0gBEUw
QzAIBgZngQwBAgEwNwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDov
L2Nwcy5sZXRzZW5jcnlwdC5vcmcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAJdAT2uynIXD7TD1LZeXSsY35izyC+QNc9iXY+lVxfVFRwMb
lgoYjhxFtb1EHenANEA+t6AfDQn7mmTVhk0G7PdAo6VCyuRocZ8dfw0ZDMRnXRic
RVpE8ePW7hwTOKzxYMW8uOIdQ+/U29ukxDQ3bdF4iVh+94pCrkWj/vd6NGFZtohR
bceI1bLKsCkFc65f6Djh7cRhedJ2NY9oXHTVGi30rlJR3W0lTw7blTjQj8ipQ7KX
ILR/SIFMeC81RbKbK6JEng8DB5wKBDQGp3xZNhoumDpT7pvOhDBU7ogaerbsCNuG
40raUjlU3qeAy8Myiqlmpa8Dc0w1vl/2dgKVzjE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCsUp7nMiNVapdj2bqdc
Xr2v6VnmTca3c6M8uuC46nllY2GuTT9bgx1gElws2p40gksezElUj/OGRhJhKZX8
E0bvkM3QhM1mBng8rNS4o6yG7xPeIP/hIa52G2VOnUbWQyO15nTACCfEvXt+PXge
egVszrCwXcNEHclj+ALn14PJPCdMh4BRUw/jvI00unPkKP1R1CKyEa7BkTeT2VXU
slIXO7lkYy5BGNmyubqTi8AqDslv80zvjdtndXBcFM89AODx8wAFkV+0ro4X9pzu
sLidUPBW9JXPyPr12sxaeks/tFOIn5uWUgxsJ2COP3ThJGkkIogKyjeAvul38Bus
NwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 358228001416790323731884977226523902515017
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-04 19:50:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-02 19:50:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20219372671764036321815404026465755608105820190950145933562014182786666399826845946960280718280953067741044777798477634291553984934386752570082344290817736300410807526235193806521212812328673218396969644495930629966818263665730469988687179345183977993737328735122898540139771330112109014858967257441896027470627150440815238357989388543606565208677855733709845772927293472533096559358815862159717702620115999579511002422479006378133107510425393585294865942687165553145823915510419525302169050140515821990086286178864663645278151531979787892080619083612104065106310239409518709964432665701785814354490987910334728875063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9077b70e87971cbfe846a257acd4a7599d8d5d02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1420 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosystatic.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-albania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-eg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-egypt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-kz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-lao.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-voli.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ci'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.kg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.tm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.tm.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conntected.bmw-abudhabi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conntected.bmw-dubai.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.conntected.bmw-kuwait.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini.com.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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