www.bmw.at

- BMW Group -

Issued by USERTrust Legacy Secure Server CA

About this certificate

This digital certificate with serial number d4:39:b8:e8:12:a6:2c:cc:65:01:f5:af:c6:34:d4:06 was issued on by The USERTRUST Network.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BMW Group

Organization: BMW Group
Organization unit: Akamai SAN SSL OV
Organization unit: Akamai SAN SSL OV
Address: Petuelring 130, Dept. AJ-35
Postal code: D-80788
State / Province: Bavaria
Locality: Munich
Country: DE

The USERTRUST Network

Organization: The USERTRUST Network
State / Province: UT
Locality: Salt Lake City
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): d4:39:b8:e8:12:a6:2c:cc:65:01:f5:af:c6:34:d4:06
Serial Number (int): 282096046377411048864497308655917782022
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 53:54:a7:3d:09:eb:b0:2b:8e:45:1a:65:2f:7e:54:4f:ff:05:57:2f
AuthorityKeyId: af:a4:40:af:9f:16:fe:ab:31:fd:fb:d5:97:8b:f5:91:a3:24:86:16

Fingerprint (sha1): 8b:c2:c7:8f:eb:26:55:2d:c2:06:82:80:6a:97:56:1b:0e:39:1a:0c
Fingerprint (sha256): 13:15:bf:56:5b:ab:b9:50:74:4f:be:74:3c:b2:5d:ae:80:b7:db:6e:1a:3d:86:c8:69:bf:c0:f6:f5:f2:24:64

Issuing Certificate URL: http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl

Check the revocation status for certificate www.bmw.at

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmw.at

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bmw.at
www-digital.bmw.co.uk
www-digital.bmw.de
www-digital.bmw.nl
www-next.bmw.at
www.bmw-int-nsc.com
www.bmw-int.com
www.bmw-int1.com
www.bmw-int1a.com
www.bmw-int1b.com
www.bmw-int1c.com
www.bmw-int1d.co.uk
www.bmw-int2.com
www.bmw-int2a.com
www.bmw-int2b.com
www.bmw-int2c.com
www.bmw-int2d.co.uk
www.bmw-int3.com
www.bmw-int3a.com
www.bmw-int3b.com
www.bmw-int3c.com
www.bmw-int3d.co.uk
www.bmw-test-nsc.com
www.bmw-test.com
www.bmw-test2.com
www.bmw-test2a.com
www.bmw-test2b.com
www.bmw-test2c.com
www.bmw-test2d.co.uk
www.bmw.co.uk

Other certificates including the domain name bmw.at

(limited to 100 certificates)
meinfs.bmw.de
cd1-eu.chargebee.com
content.bmw.at
eu12-1.cdn.salesforce-communities.com
con.api.mini
mail.harmtodt.bmw.at
configure.bmw.com
fb.bmw.at
www.bmw.de
configure.bmw.com
cd1-eu.chargebee.com
content.bmw.at
forms.bmw.at
cd1.chargebee.com
ecom2.bmw.at
con.api.mini
www.bmw.de
content.bmw.at
configure.bmw.com
www.bmw-int4.com
newsletter.bmw.at
www.auer.bmw.at
bmw-kneidinger-haslach.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
formsolution.bmw.at
con.api.mini
mini-denzel.at
www.bmw.de
mail.harmtodt.bmw.at
www.bmw.de
eu12-1.cdn.salesforce-communities.com
content.www.bmw.at
meinfs.bmw.de
content.www.bmw.at
cd1-eu.chargebee.com
con.api.mini
www.bmw.de
store.bmw.at
eu12-1.cdn.salesforce-communities.com
partner-prime.bmw.at
www.bmw.de
bmw-ho-sites.bmw.at
bierbaum-motorrad.bmw.at
www.bmw.de
con.api.mini
cd1-eu.chargebee.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
cd1-eu.chargebee.com
www-origin.bmw-prod3.com
www.bmw.de
con.api.mini
newsletter.mini.at
www.bmw.at
mail.bierbaumbd.bmw.at
formhub.bmw.at
configure.bmw.com
mini-denzel.at
tracking.bmw.at
www.bmw.at
formhub.bmw.at
www.bmw.de
www-origin-proda2.bmw.com
efinance-t.bmw.at
mail.knoebl.bmw.at
bierbaum-motorrad.bmw.at
newsletter.mini.at
bmw-partner.bmw.at
tracking-dev.bmw.at
bmw-ho-sites.bmw.at
www-origin-proda2.bmw.com
www.bmwgroup.com
configure.bmw.com
tracking.bmw.at
www-origin.bmw-prod3.com
www.bmw.de
newsletter.bmw.at
bmw-partner.bmw.at
www.bmw.at
bmw-kneidinger-haslach.at
tracking.bmw.at
webmail.reichhart.bmw.at
www.bmw.at
configure.bmw.com
eu12-1.cdn.salesforce-communities.com
meinfs.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.de
mail.knoebl.bmw.at
eu12-1.cdn.salesforce-communities.com
nextcloud.knoebl.bmw.at
www-origin-proda2.bmw.com
www.bmw.de
fb.bmw.at
www.bmw.de
bmw-partner.bmw.at
configure.bmw.com

Certificate

The complete raw certificate details for www.bmw.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCdBhD73Gni6IywDvWxLiXiSYXC
OAg9lrm6e+xgr/2yOqeAFl92Irw0Eo2AL0pD7TYv3MVvkhxt1tnnQkYXSGYpnaPf
21aeejtgYCC89iBeECOk6e5qhFm8/qJIvgMZGP1c+a55DE47MxbiEOdp6GprSYi+
FZdWeB+7wxsn/6o1PwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 282096046377411048864497308655917782022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salt Lake City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The USERTRUST Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'USERTrust Legacy Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'D-80788'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Petuelring 130, Dept. AJ-35'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 110265789641906004389252631731719437595473071496441070340582184109716809492022447208343622269647555089522243859740914152077281738132303098295048285903165673369390076358012026446036183316412545422770522556819604901429266918626533842200781196137523442643871841997620915166950111690500420684752307070326203364671
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName afa440af9f16feab31fdfbd5978bf591a3248616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5354a73d09ebb02b8e451a652f7e544fff05572f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/USERTrustLegacySecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/USERTrustLegacySecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (578 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-digital.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-digital.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-digital.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-next.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int-nsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int1a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int1b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int1c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int1d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int2c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int2d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int3a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int3b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int3c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-int3d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test-nsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test2a.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test2b.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test2c.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-test2d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.uk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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