www.dealername.bmw.de

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 64:5d:16:2c:01:56:58:be:e7:bc:e5:9e was issued on by GlobalSign nv-sa.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 64:5d:16:2c:01:56:58:be:e7:bc:e5:9e
Serial Number (int): 31061035787174391780130743710
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 64:03:87:4b:18:46:2d:6c:94:58:27:73:b1:2b:9c:ed:5d:6d:e3:00
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): fe:a0:51:82:ae:a6:e6:cb:4b:a4:50:28:67:0b:96:da:55:89:e4:94
Fingerprint (sha256): 0f:bc:27:24:b3:e7:cd:d1:e2:4a:3f:72:e5:6f:13:f3:3d:d5:67:34:28:56:3e:77:09:9e:56:d8:b8:1f:89:c8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.dealername.bmw.de

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.dealername.bmw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.dealername.bmw.de
bilia-emond-arlon.bmw.be
bilia-emond-libramont.bmw.be
jobs.mini.be
joie.bmw.be
vreugde.bmw.be
werkenbij.bmw.be
werkenbijbmw.be
www.arbeitenbeibmw.lu
www.beckersdilsen.bmw.be
www.beckersgenk.bmw.be
www.beelen.bmw.be
www.belux.bmw.be
www.bilia-emond-arlon.bmw.be
www.bilia-emond-libramont.bmw.be
www.bmwgroupbelux.net
www.centrautomalle.bmw.be
www.delbrassinne.bmw.be
www.emond.bmw.be
www.emondarlon.bmw.be
www.emondlibramont.bmw.be
www.emontspool.bmw.be
www.geertmeerschman.bmw.be
www.gregoir-dendermonde.bmw.be
www.gregoir-romein-dendermonde.bmw.be
www.gregoir-vanboom.bmw.be
www.jldmotor.bmw.be
www.jobs.mini.be
www.jorssenschoten.bmw.be
www.jorssenwilrijk.bmw.be
www.lecoutertielt.bmw.be
www.lemmenslecouter.bmw.be
www.leterme.bmw.be
www.meerschmanninove.bmw.be
www.meerschmanzottegem.bmw.be
www.romein-dendermonde.bmw.be
www.schillebeekx.bmw.be
www.theovanavondt.bmw.be
www.travaillerpourbmw.be
www.travaillerpourbmw.lu
www.vanavondt.bmw.be
www.vanavondtherent.bmw.be
www.vanboom.bmw.be
www.vanboomasse.bmw.be
www.vanboompuurs.bmw.be
www.vandekerckhoveouwegem.bmw.be
www.vandekerckhoveronse.bmw.be
www.vandekerckhovezingem.bmw.be
www.vanneste.bmw.be
www.waterloomotors.bmw.be
www.werkenbijbmw.be
dealername.bmw.de

Other certificates including the domain name bmw.de

(limited to 100 certificates)
www.dialog.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de

Certificate

The complete raw certificate details for www.dealername.bmw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGwJ1tKBhNz+eXtRzulK
tbkAhIg+9tnv5pjCR413dmnX1jFRbNo+GnTr+24+ABKkRqe1UbN9McXrc+pnqqeR
Y/vbSHwrg3SN+o1rq15jWIJsgJ8qv6uQBWZzchXWt/BySyhc4zadGR9kM80KjqpK
W239wnxWkEujZLDJ/KXuUf470gmk75N0J6JZEmXA8uwzkTADklKbyuPSt4Ohn0xp
vlaDkiIs4w+2jO3h0BzPuZ15M2ooruFUyr2ZlG0/c7Yy77c8HQN8IZ34b/P1dElU
+WEYJbAuAZDe/Zh8ohsq06bijrT4mwdQgLdlY/oiU9esYjXkELjDaARJwon0m0we
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31061035787174391780130743710
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 09:36:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 09:36:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.dealername.bmw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24795983510854586252567545680089495574534656087111824230158561112543705289950373888121576320798439611373291864193967173900574929310929675166668642832592922123069742699132878802004273837532263073462090943194472861322422664588195079413357077330429703544427946708941132417926550639990661752382436690334727634346807180287477581247287934134351867974726947595050333005216453918679479696493590720316680270884888977383517192972582399481425404807727397715736868763207437471671785263501318207317878475069254947845208357855021163242183038638999083209003923927434235925584236865669725209233637772276113731157414205731408393805429
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dealername.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilia-emond-arlon.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bilia-emond-libramont.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jobs.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'joie.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vreugde.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werkenbij.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'werkenbijbmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arbeitenbeibmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckersdilsen.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beckersgenk.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beelen.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.belux.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilia-emond-arlon.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bilia-emond-libramont.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwgroupbelux.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centrautomalle.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delbrassinne.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emond.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emondarlon.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emondlibramont.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emontspool.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.geertmeerschman.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregoir-dendermonde.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregoir-romein-dendermonde.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gregoir-vanboom.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jldmotor.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jorssenschoten.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jorssenwilrijk.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lecoutertielt.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lemmenslecouter.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leterme.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meerschmanninove.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meerschmanzottegem.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.romein-dendermonde.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schillebeekx.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theovanavondt.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travaillerpourbmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.travaillerpourbmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanavondt.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanavondtherent.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanboom.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanboomasse.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanboompuurs.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vandekerckhoveouwegem.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vandekerckhoveronse.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vandekerckhovezingem.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanneste.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.waterloomotors.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.werkenbijbmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealername.bmw.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6403874b18462d6c94582773b12b9ced5d6de300
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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