microservices.api.bmw

Issued by R3

About this certificate

This digital certificate with serial number 04:27:62:4d:bb:87:4d:01:b9:cf:79:91:93:13:34:68:7a:98 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=microservices.api.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:27:62:4d:bb:87:4d:01:b9:cf:79:91:93:13:34:68:7a:98
Serial Number (int): 361850823990932845853274330976882986089112
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: e3:12:12:3c:52:3e:e4:15:03:b7:0f:71:d8:f3:da:21:b5:38:50:c1
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): a7:cc:4f:4b:2e:81:58:a0:d0:3e:8a:32:92:d2:8b:f0:02:31:de:12
Fingerprint (sha256): 11:50:c7:ca:95:55:33:8b:73:31:14:dd:28:dd:e9:84:97:8b:85:d9:ba:28:0b:32:df:d0:2f:7d:af:81:ec:88

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate microservices.api.bmw

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for microservices.api.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin-int.epaas.api.bmw
admin.epaas.api.bmw
akamai.prod.eshops.bmw.cloud
campaign-car-int.api.bmw
campaign-car.api.bmw
consentcontroller-backend-int.epaas.api.bmw
consentcontroller-backend.epaas.api.bmw
consentcontroller-int.epaas.api.bmw
consentcontroller.epaas.api.bmw
crawler-int.epaas.api.bmw
crawler.epaas.api.bmw
crawler2-int.epaas.api.bmw
crawler2.epaas.api.bmw
crawler3-int.epaas.api.bmw
crawler3.epaas.api.bmw
crawler4-int.epaas.api.bmw
crawler4.epaas.api.bmw
dlo-int.api.bmw
dlo.api.bmw
documents.pay.bmwgroup.com
dvss-core-d.api.bmw
dvss-core-e.api.bmw
dvss-core-i.api.bmw
dvss-core-s.api.bmw
dvss-core.api.bmw
dvss-dcs-frontend-d.api.bmw
dvss-dcs-frontend-e.api.bmw
dvss-dcs-frontend-i.api.bmw
dvss-dcs-frontend-s.api.bmw
dvss-dcs-frontend.api.bmw
dvss-product-cart-d.api.bmw
dvss-product-cart-e.api.bmw
dvss-product-cart-i.api.bmw
dvss-product-cart-s.api.bmw
dvss-product-cart.api.bmw
dvss-tradein-e.api.bmw
dvss-tradein-s.api.bmw
dvss-tradein.api.bmw
dynamiccontent-int.bmw.com
dynamiccontent.bmw.com
gcdmcdn-int.bmw.com
gcdmcdn.bmw.com
image-collage-int.api.bmw
image-collage.api.bmw
int.dochandling.pay.api.bmw
int.documents.pay.bmwgroup.com
int.mybmw.com
int.pay.bmwgroup.com
microservices.api.bmw
mybmwweb-flyout-e2e.api.bmw
mybmwweb-flyout-int.api.bmw
mybmwweb-flyout-preview.api.bmw
mybmwweb-flyout-test.api.bmw
mybmwweb-flyout.api.bmw
mybmwweb-utilities-int.api.bmw
mybmwweb-utilities.api.bmw
myce-int.api.bmw
myce-prod.api.bmw
mycenext-admin-int.api.bmw
mycenext-admin.api.bmw
mycenext-int.api.bmw
mycenext-s3-int.api.bmw
mycenext-s3.api.bmw
mycenext.api.bmw
nicce-bh-int.api.bmw
nicce-bh-int1.bmwgroup.com
nicce-bh-prod2.api.bmw
nicce-bh.api.bmw
nicce-bh.bmwgroup.com
nicce-gko-int.api.bmw
nicce-gko-prod2.api.bmw
nicce-gko.api.bmw
pay.bmwgroup.com
preprod-na.documents.pay.bmwgroup.com
preprod.dochandling.pay.api.bmw
preprod.documents.pay.bmwgroup.com
preprod.mybmw.com
processingwrapper.epaas.api.bmw
prod.dochandling.pay.api.bmw
productdata-dev.api.bmw
productdata-int1.api.bmw
qrcode.api.bmw
slwa-internet-backend-int1.api.bmw
slwa-intranet-backend-int1.api.bmw
slwa-intranet-backend.api.bmw
slwa-scheduler.api.bmw
slwa-third-party-int1.api.bmw
slwa-third-party.api.bmw
stocklocator-dealers-int.bmw.com
stocklocator-dealers.bmw.com
stolo-frontend-dev.api.bmw
stolo-frontend-int.api.bmw
test.dochandling.pay.api.bmw
test.documents.pay.bmwgroup.com
test.mybmw.com
test.pay.bmwgroup.com
tracking-api.bmw.com
wcp-int-adobelighttracking.api.bmw
wcp-int-hellospring.api.bmw
wpm.api.bmw

Other certificates including the domain name api.bmw

(limited to 100 certificates)

Certificate

The complete raw certificate details for microservices.api.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TvjKGBVreKFvIBNcOWE
wRMZ3KY/YHOZ56PKULd2li3yOZY5u0atZSbDTU7Tg7J7by/DvzMhLERF3FfH6qJJ
L/m67DzpbGGyqWvQBV0y+AFnOsF2P1dAJ5JF9juE3BBLOzQbt9fgE8CRNpXpMhSO
gYUIc2BOw1sdqfenIo+kRSgPKjLMe0LtxaDtbuNXaNb+mFFN0UemjgTqLM9uvufp
A5B+KLJbqxfO3mmpxk5niyUAFfcg8qmBRmD/XRse6i/BjX0tOmemhVFI6A3slcK5
KSV6NQ+yhKGXnKurk3RJwffPBoSBYGs8HctI+As2VeU2lUTk/1cnhHhO6bdDXMXb
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 361850823990932845853274330976882986089112
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-19 05:52:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 05:52:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'microservices.api.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28938103382694555109610497393381168546742277195447184363185013517334265086163801960261273289960525161148077651150763217944357792812377131733134582719315946965434651774982876269561932851057870989843498337649719554618535671966764734563291817070088365440635513005013588384054578465387238764183044069751388282340626193245626345793509021137747855845517672132749561461668063002438979543470906563585888435757897279270518418165026833592661795224893717844173083608777256804244025973253000779552454267433415891932121591648001126772041752971901316795273967310445240248004809239997166185662812307433760547593788051767650607815561
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e312123c523ee41503b70f71d8f3da21b53850c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2612 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.prod.eshops.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign-car-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'campaign-car.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consentcontroller-backend-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consentcontroller-backend.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consentcontroller-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consentcontroller.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler2-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler2.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler3-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler3.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler4-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crawler4.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlo-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dlo.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documents.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-core-d.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-core-e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-core-i.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-core-s.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-core.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-dcs-frontend-d.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-dcs-frontend-e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-dcs-frontend-i.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-dcs-frontend-s.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-dcs-frontend.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-product-cart-d.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-product-cart-e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-product-cart-i.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-product-cart-s.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-product-cart.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-tradein-e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-tradein-s.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dvss-tradein.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiccontent-int.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dynamiccontent.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcdmcdn-int.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcdmcdn.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-collage-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'image-collage.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.dochandling.pay.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.documents.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.mybmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'microservices.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-flyout-e2e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-flyout-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-flyout-preview.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-flyout-test.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-flyout.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-utilities-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybmwweb-utilities.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myce-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myce-prod.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext-admin-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext-admin.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext-s3-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext-s3.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mycenext.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-bh-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-bh-int1.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-bh-prod2.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-bh.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-bh.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-gko-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-gko-prod2.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nicce-gko.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod-na.documents.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.dochandling.pay.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.documents.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.mybmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processingwrapper.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.dochandling.pay.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productdata-dev.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'productdata-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-internet-backend-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-intranet-backend-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-intranet-backend.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-scheduler.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-third-party-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-third-party.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocklocator-dealers-int.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stocklocator-dealers.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolo-frontend-dev.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stolo-frontend-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.dochandling.pay.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.documents.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mybmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.pay.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int-adobelighttracking.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp-int-hellospring.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000188d26ce3ea00000403004730450221009d80f576978021ca58cc7e2d5e701002a2657a1f10c79678bb2437bd0f2aef1902203d7b410d5d7db740e5e4a4b58d66c42a15310843133d75f055b0efc23f507878007500b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000188d26ce3e2000004030046304402206e8aef0d5b1e89c1d62c8b76fd386b1bb8ea7d77112c58234c479231777e8268022067d2573f26a6732589f3b30cb79a89e18fa13ad12d5e5105c9cc58bde2db77d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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