dealer.bmw-int4.com

- Bayerische Motoren Werke AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 74:58:09:b3:4e:e7:9b:65:e6:a2:68:65:41:17:7b:2f was issued on by GeoTrust Inc..

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 74:58:09:b3:4e:e7:9b:65:e6:a2:68:65:41:17:7b:2f
Serial Number (int): 154647566382548655483443398737726503727
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 2f:06:43:e1:4e:87:79:b6:13:36:81:8d:1f:9c:e1:39:8a:03:d5:3d
Fingerprint (sha256): 12:59:15:3c:7d:d8:59:62:48:fe:5e:1b:a6:ce:eb:fc:24:5e:8d:8b:03:8a:6d:cf:a5:f1:20:90:32:11:9b:19

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate dealer.bmw-int4.com

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealer.bmw-int4.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bmw.ps
www.bmw-antilles.fr
www.bmw.ba
www.bmw-jordan.com
www.bmw.re
www.bmw.com.mk
www-int.chargenow.com
www.bmw-bahrain.com
www.bmw-tahiti.com
www.bmw-tunisia.com
static.bmw-int3.com
www.m152.bmw-int3.com
www.bmw.dz
vision.next100.bmw
www.bmw-yemen.com
www-int.bmwbkk.de
www.m152.bmw-int1.com
m.bmw.de
www.m46.bmw-int2.com
www.m152.bmw-int2.com
www.m59.bmw-int2.com
www.m21.bmw-int2.com
www.m60.bmw-int2.com
www.m23.bmw-int2.com
www.m5.bmw-int2.com
www.m17.bmw-int2.com
www.m47.bmw-int2.com
www.m12.bmw-int2.com
www.m15.bmw-int2.com
www.m20.bmw-int2.com
www.m14.bmw-int2.com
www.m11.bmw-int2.com
www.m37.bmw-int2.com
www.m7.bmw-int2.com
www.m8.bmw-int2.com
www.m35.bmw-int2.com
www.m44.bmw-int2.com
www.m58.bmw-int2.com
www.m32.bmw-int2.com
www.m33.bmw-int2.com
www.m24.bmw-int2.com
www.m3.bmw-int2.com
www.m28.bmw-int2.com
www.m19.bmw-int2.com
www.m50.bmw-int2.com
www.m45.bmw-int2.com
www.m4.bmw-int2.com
www.m41.bmw-int2.com
www.m26.bmw-int2.com
www.m51.bmw-int2.com
www.m43.bmw-int2.com
www.m57.bmw-int2.com
www.m38.bmw-int2.com
www.m55.bmw-int2.com
www.m27.bmw-int2.com
www.m56.bmw-int2.com
www.m29.bmw-int2.com
www.m48.bmw-int2.com
www.m9.bmw-int2.com
www.m25.bmw-int2.com
www.m36.bmw-int2.com
www.m10.bmw-int2.com
www.m52.bmw-int2.com
www.m13.bmw-int2.com
www.m2.bmw-int2.com
www.m18.bmw-int2.com
www.m49.bmw-int2.com
www.m39.bmw-int2.com
www.m42.bmw-int2.com
www.m53.bmw-int2.com
www.m34.bmw-int2.com
www.m40.bmw-int2.com
www.m54.bmw-int2.com
www.m16.bmw-int2.com
www.m6.bmw-int2.com
www.m22.bmw-int2.com
www.m31.bmw-int2.com
www.m1.bmw-int2.com
www.m30.bmw-int2.com
www.p58.bmw.com
www.p54.bmw.com
www.p56.bmw.com
www.p55.bmw.com
some.bmw.com
www.p57.bmw.com
www.p52.bmw.com
www.p152.bmw.com
www.p166.bmw.com
www.p50.bmw.com
www.p51.bmw.com
bmwi-some.bmw.com
legacy.bmw.com
www.m152.bmw-int4.com
dealer.bmw-int4.com

Other certificates including the domain name bmw-int4.com

(limited to 100 certificates)
www-origin-s2.bmw-int4.com
con.api.mini
bmw-int1.com
www-origin.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
dealer.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
www.m61.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
dealer.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
core.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
core.bmw-int4.com
www.bmw.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
www.bmw.com
bmw-int1.com
www.bmw.com
dealer.bmw-int4.com
www.bmw.com
bmw-int1.com
bmw-int1.com
www.bmw.at
www.bmw.com
core.bmw-int4.com
www.bmw.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
www.bmwlat.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw.com
www.bmw.at
www.bmw.at
dealer.bmw-int4.com
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
con.api.mini
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dealer.bmw-int4.com
con.api.mini
con.api.mini
bmw-int1.com
con.api.mini
dev.wcmp.bmw
con.api.mini
bmw-int1.com
con.api.mini
www.bmw.com
www.bmw.at
bmw-int1.com
www.bmwlat.com
www.bmwlat.com
www.bmw.at
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw-int4.com
www.bmw.at
www.bmw.at
www.m61.bmw-int4.com
www.bmw.de
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmwlat.com
con.api.mini
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
www.m1.bmw-int7.com
con.api.mini
con.api.mini
www.m1.bmw-int7.com

Certificate

The complete raw certificate details for dealer.bmw-int4.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY705PIbLHJEwVvAkW70
6u9FjQHcPcozC6OKFYiCZGzE9yRoQobh3wlQK+kwwjIxScXfhsWLX2Mwm3xtJQZV
oMa2ddskVyseNXEuBp+MZhGI8qlRoqU2AKCgiKsxvEp6eLwklDBmjkh18K3h5kO8
LslyqUnn6mAVXFjD+FU+6XKXpMcb6w3bRSDXr3cKS1FphLkDi9uE9AhRNorbSNo1
v3srf1HQuZO75dWpDL0tB4Hwr9AiDLxsmcj/kfDugTBG7hV/p2zD8ums61who93L
5aanHWVv5FERWKTbOTPrR0Ea6CrZs3dyjtl0U7uoLgiTaSskH4z2XTolHLTDs/MK
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 154647566382548655483443398737726503727
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dealer.bmw-int4.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22919627734774025090676963512099703723228187410913533191301887146764052356157453499791731742799493952181285122404887324000686301659889469464780802400007216299359486542051106365707938107743108451707695480453979933860617840602086879513453832027683826258511473841446020319487978764441514591843696251275732250223507335314750314440801504764826600057871175958301106480879129858223613052051739501691889342810876153830667887528984444598549782238655640480764866907768874926562101551106812891677037547373200118119602452298459214244924503669032391158816254241685753177472987376638343571359420274509991771711111078977549081184927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1928 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.chargenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m46.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m59.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m21.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m60.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m23.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m5.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m17.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m47.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m12.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m15.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m20.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m14.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m11.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m37.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m7.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m8.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m35.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m44.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m58.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m32.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m33.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m24.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m3.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m28.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m19.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m50.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m45.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m4.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m41.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m26.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m51.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m43.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m57.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m38.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m55.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m27.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m56.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m29.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m48.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m9.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m25.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m36.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m10.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m52.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m13.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m2.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m18.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m49.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m39.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m42.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m53.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m34.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m40.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m54.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m16.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m6.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m22.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m31.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m30.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p58.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p54.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p56.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p55.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p57.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p52.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p152.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p166.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p50.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p51.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwi-some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw-int4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015edcc7706600000403004830460221008c8ace8646c0b99a6c85b2bbfab526533328e01cad11a0133398ad3d797913dd022100e6131969eec6cb710d30f57b12eda1ed7f609401050f188540fe2267b321ae9a007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015edcc7709f00000403004830460221009669ad733133177a1877695f217c189820daf7445861f2e189e48b7b4fe3d2e002210087744b30d3aa4053b6e5ea155b61a8f126c7892114d978c7d973b1ec4a23ae4b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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