prod.admin.belux.bmw.be

- BMW Group -

Issued by TC TrustCenter Class 2 L1 CA XI

About this certificate

This digital certificate with serial number 94:94:00:01:00:02:ef:d6:99:4e:73:3c:29:39 was issued on by TC TrustCenter GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • CAs must include keyIdentifer field of AKI in all non-self-issued certificates (RFC 5280: 4.2.1.1)
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BMW Group

Organization: BMW Group
Organization unit: SSL-Server

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 94:94:00:01:00:02:ef:d6:99:4e:73:3c:29:39
Serial Number (int): 3013522390601538339979996589467961
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId:
AuthorityKeyId:

Fingerprint (sha1): dd:06:20:b1:eb:34:61:9d:21:21:62:58:70:2d:cf:71:db:e6:63:a2
Fingerprint (sha256): 0e:d3:6d:ec:4a:c0:6f:61:a2:15:2f:c5:c2:dd:2a:f5:39:72:20:71:17:3c:72:0c:98:9d:e4:ca:d2:71:21:c0

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt

Revocation information

CRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl

Check the revocation status for certificate prod.admin.belux.bmw.be

1

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prod.admin.belux.bmw.be

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prod.admin.belux.bmw.be [email protected]

Other certificates including the domain name bmw.be

(limited to 100 certificates)
davo.bmw.be
meinfs.bmw.de
dejonckheere-tournai.bmw.be
efinance-i2.bmw.be
configure.bmw.com
www.bmw.de
configure.bmw.com
beckers.bmw.be
genet.bmw.be
cocquyt.bmw.be
depotter.bmw.be
test-dealercms.bmw.be
allcars.bmw.be
deschepper.bmw.be
www.bmw.de
configure.bmw.com
deschepper.bmw.be
www.bmw-int4.com
www.bmw.de
www.bmw.de
afpt.bmw.be
www.bmw.de
genet.bmw.be
dejonckheere.bmw.be
www.bmw.de
beckers.bmw.be
dhaese.bmw.be
access14.bmw.de
www.bmw.de
bilia-verstraeten.bmw.be
belux-new.bmw.be
dejonckheere-roeselare.bmw.be
www.bmw.de
test-dealercms.bmw.be
afpt.bmw.be
www-origin.bmw-prod3.com
belien.bmw.be
www.bmw.de
bortolin.bmw.be
configure.bmw.com
lemmenslecouter.bmw.be
bortolin.bmw.be
www.bmw.de
prod.admin.belux.bmw.be
www-origin-proda2.bmw.com
demey-maldegem.bmw.be
www.dealername.bmw.de
centrauto.bmw.be
prod.admin.belux.bmw.be
storybook.polarcode.app
bmwi-fr.bmw.be
davo.bmw.be
bilia-emond.bmw.be
genet.bmw.be
www-origin-proda2.bmw.com
mail.bmw.be
configure.bmw.com
konexus.app
www-origin.bmw-prod3.com
www.bmw.de
daeninck.bmw.be
dejonckheere.bmw.be
demey-maldegem.bmw.be
daeninck.bmw.be
dejonckheere.bmw.be
cocquyt.bmw.be
demey.bmw.be
configure.bmw.com
meinfs.bmw.de
demey.bmw.be
depotter.bmw.be
gamotors.bmw.be
dejonckheere-tournai.bmw.be
www.bmw.de
bmw.configure.bmw.cloud
serviceapp.bmw.be
depotter.bmw.be
ludwigmotors.bmw.be
www-origin-proda2.bmw.com
www.bmw.de
bilia-emond.bmw.be
www.bmw.de
genet.bmw.be
configure.bmw.com
www.bmw.de
www.audittool.bmw.be
daeninck.bmw.be
configure.bmw.com
ludwigmotors.bmw.be
dejonckheere-roeselare.bmw.be
www.bmw.de
daeninck.bmw.be
discar.bmw.be
demey.bmw.be
www.bmw.de
dejonckheere-roeselare.bmw.be
configure.bmw.com
faq.bmw.be
configure.bmw.com
meinfs.bmw.de

Certificate

The complete raw certificate details for prod.admin.belux.bmw.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskRcrm3yW3nDDj2m3DnV
JvOD6SlCVYnEY6evOp8rFby49viOPv7it3mGmM3acJZvkcbAkwVS5hBAi2lF+WyL
KqMswmmRaH2H9VKK5zpgal4wF1Q8DOTX9G+Hvu8HW1qNKfXBEVHnT/d+r2yjqEaN
ohf0GLyn8Y77nzsWAi/4Fr3sGvLnIDI20uWE+FakKcs+5ccv1NixC02uSlWsmu8I
/89ukNZYKG+DE5VExJHcorEwt5G3r8eHRbRjC9qsMNFEu2+B4WGj4t04jlDrvPg+
E4ybUYzNaXQg9WPGdYJXlUAYYa9CuI2CRlS4KlsNlTRiQ/FJ4ftqmQ3K7xsxoC8F
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3013522390601538339979996589467961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-28 14:32:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-02-15 14:32:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'bmwgroup'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL-Server'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prod.admin.belux.bmw.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22504128860607728023995027168870384412859200269762493364972260450025940823518486422903357231438211548693001979462926807161743105740719040254380159827542564232767583810097620709257094036747082924950202015422766769056829630037546783554576533992490296532735264799254770596165616081680067150707463303090943845312404569777093252036455461913725196617641676100125045777513956076558463332122138163290241066501099276234415798995215908545175611611996930234082403793118126985011482922480003488545704885349087807054086729975362886431401129217124987995796188004843709356605299925327593092096996258660768009737101560656745863251231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (85 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.admin.belux.bmw.be'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b9dd2cd98b9f0b26ae5f0d920fca57384a68d92638a3a7474d9659fb473279463a1b2bdc62c99b0e4060d42cb64df3e2cc6418fc498c15d97db1333cb768639cb28dd7b81229f28b1999f9d58dfc5378f5c70c581b7b0b7ad7596eb9137349673285adaa3c71ce1f494e13023c587264e0185ed47cd8115ce237d377d89c722765f9dcaa88a8080a41f306b4b2280f3fbbcb8e04a6a3cec120c054445e32428133d160c925e5b3f156c627ad8490e770836739d2223cb5497ab889f5f61ed9fdac2e6ef839d450b71d5b73dc7e86f1730f8409f68e7161d681edcb17b47b82ec811982050b118352c5e3a0997a20dfc57a76324b0df95000b2d8d396c7643a31