configure.bmw.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:08:46:18:33:22:95:ca:2b:5c:f1:27:1a:f4:50:4e:27:56 was issued on by Let's Encrypt.

With 71 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=configure.bmw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:08:46:18:33:22:95:ca:2b:5c:f1:27:1a:f4:50:4e:27:56
Serial Number (int): 351264574274381048227144303871039789475670
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 01:be:6b:3e:db:33:3f:75:c1:15:ba:85:a5:9e:f7:a7:2f:f4:72:3c
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e0:4b:13:39:f3:81:40:4f:0f:51:86:38:3f:8d:87:2f:6c:8f:ff:9e
Fingerprint (sha256): 14:62:cd:1c:b2:10:96:d5:a2:a2:cd:b2:aa:7b:5c:08:07:58:13:c3:36:1e:7a:65:5b:fe:15:be:c9:37:e5:01

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate configure.bmw.com

71

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for configure.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

configure.bmw.at
configure.bmw.be
configure.bmw.bg
configure.bmw.ca
configure.bmw.ch
configure.bmw.cl
configure.bmw.co.jp
configure.bmw.co.kr
configure.bmw.co.uk
configure.bmw.co.za
configure.bmw.com
configure.bmw.com.au
configure.bmw.com.br
configure.bmw.com.co
configure.bmw.com.mx
configure.bmw.com.pe
configure.bmw.com.tw
configure.bmw.cz
configure.bmw.de
configure.bmw.dk
configure.bmw.es
configure.bmw.fi
configure.bmw.fr
configure.bmw.gr
configure.bmw.hu
configure.bmw.ie
configure.bmw.in
configure.bmw.it
configure.bmw.lu
configure.bmw.nl
configure.bmw.no
configure.bmw.pl
configure.bmw.pt
configure.bmw.ro
configure.bmw.ru
configure.bmw.se
configure.bmw.si
configure.bmw.sk
configure.mini.at
configure.mini.co.kr
configure.mini.com
configure.mini.com.au
configure.mini.de
configure.mini.es
configure.mini.jp
configure.mini.nl
garage.bmw.at
garage.bmw.be
garage.bmw.ca
garage.bmw.ch
garage.bmw.cl
garage.bmw.co.jp
garage.bmw.co.kr
garage.bmw.co.uk
garage.bmw.co.za
garage.bmw.com.au
garage.bmw.com.co
garage.bmw.com.pe
garage.bmw.de
garage.bmw.es
garage.bmw.fr
garage.bmw.it
garage.bmw.lu
garage.bmw.nl
garage.bmw.ru
garage.mini.at
garage.mini.co.kr
garage.mini.de
garage.mini.es
garage.mini.jp
garage.mini.nl

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com
www.bmw.com

Certificate

The complete raw certificate details for configure.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIKVTCCCT2gAwIBAgISBAhGGDMilcorXPEnGvRQTidWMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDExMjMwNzI0NTdaFw0y
MTAyMjEwNzI0NTdaMBwxGjAYBgNVBAMTEWNvbmZpZ3VyZS5ibXcuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C8WW/Dd4KzSd6BVtYJEq2z3UYRt
Jv/+INMeAduOs/yiC7NQJ8eXQTcENDv3bwEcBDBW+ItaeGTAs/UmVjvjBDrRaANh
Ainq0x9yx6U1O0y6NweGhYn4gqn1ELhf9lad8JQKIvGSTfd6fR3O+n8r3jjSLH6Z
gW7MmPpt5Zk0DcwF/RI/A9Hevkx+ciJhti2EYwzbeoOFjEhXSlFpXmlcat4XXlog
HvO0JbiWJPuLwd1Fv9KMPA0bUuIYWvh4O/tE53G6hXlQ+6mXSRoqBrH71Nf86AO2
n2yHQo4voG71zQbc2tutM25yRKjzKw9YkKNSNytjbJQa20RCokNg8Hta8QIDAQAB
o4IHYTCCB10wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQBvms+2zM/dcEVuoWlnven
L/RyPDAfBgNVHSMEGDAWgBSoSmpjBH3duubRObemRWXv86jsoTBvBggrBgEFBQcB
AQRjMGEwLgYIKwYBBQUHMAGGImh0dHA6Ly9vY3NwLmludC14My5sZXRzZW5jcnlw
dC5vcmcwLwYIKwYBBQUHMAKGI2h0dHA6Ly9jZXJ0LmludC14My5sZXRzZW5jcnlw
dC5vcmcvMIIFFgYDVR0RBIIFDTCCBQmCEGNvbmZpZ3VyZS5ibXcuYXSCEGNvbmZp
Z3VyZS5ibXcuYmWCEGNvbmZpZ3VyZS5ibXcuYmeCEGNvbmZpZ3VyZS5ibXcuY2GC
EGNvbmZpZ3VyZS5ibXcuY2iCEGNvbmZpZ3VyZS5ibXcuY2yCE2NvbmZpZ3VyZS5i
bXcuY28uanCCE2NvbmZpZ3VyZS5ibXcuY28ua3KCE2NvbmZpZ3VyZS5ibXcuY28u
dWuCE2NvbmZpZ3VyZS5ibXcuY28uemGCEWNvbmZpZ3VyZS5ibXcuY29tghRjb25m
aWd1cmUuYm13LmNvbS5hdYIUY29uZmlndXJlLmJtdy5jb20uYnKCFGNvbmZpZ3Vy
ZS5ibXcuY29tLmNvghRjb25maWd1cmUuYm13LmNvbS5teIIUY29uZmlndXJlLmJt
dy5jb20ucGWCFGNvbmZpZ3VyZS5ibXcuY29tLnR3ghBjb25maWd1cmUuYm13LmN6
ghBjb25maWd1cmUuYm13LmRlghBjb25maWd1cmUuYm13LmRrghBjb25maWd1cmUu
Ym13LmVzghBjb25maWd1cmUuYm13LmZpghBjb25maWd1cmUuYm13LmZyghBjb25m
aWd1cmUuYm13LmdyghBjb25maWd1cmUuYm13Lmh1ghBjb25maWd1cmUuYm13Lmll
ghBjb25maWd1cmUuYm13LmlughBjb25maWd1cmUuYm13Lml0ghBjb25maWd1cmUu
Ym13Lmx1ghBjb25maWd1cmUuYm13Lm5sghBjb25maWd1cmUuYm13Lm5vghBjb25m
aWd1cmUuYm13LnBsghBjb25maWd1cmUuYm13LnB0ghBjb25maWd1cmUuYm13LnJv
ghBjb25maWd1cmUuYm13LnJ1ghBjb25maWd1cmUuYm13LnNlghBjb25maWd1cmUu
Ym13LnNpghBjb25maWd1cmUuYm13LnNrghFjb25maWd1cmUubWluaS5hdIIUY29u
ZmlndXJlLm1pbmkuY28ua3KCEmNvbmZpZ3VyZS5taW5pLmNvbYIVY29uZmlndXJl
Lm1pbmkuY29tLmF1ghFjb25maWd1cmUubWluaS5kZYIRY29uZmlndXJlLm1pbmku
ZXOCEWNvbmZpZ3VyZS5taW5pLmpwghFjb25maWd1cmUubWluaS5ubIINZ2FyYWdl
LmJtdy5hdIINZ2FyYWdlLmJtdy5iZYINZ2FyYWdlLmJtdy5jYYINZ2FyYWdlLmJt
dy5jaIINZ2FyYWdlLmJtdy5jbIIQZ2FyYWdlLmJtdy5jby5qcIIQZ2FyYWdlLmJt
dy5jby5rcoIQZ2FyYWdlLmJtdy5jby51a4IQZ2FyYWdlLmJtdy5jby56YYIRZ2Fy
YWdlLmJtdy5jb20uYXWCEWdhcmFnZS5ibXcuY29tLmNvghFnYXJhZ2UuYm13LmNv
bS5wZYINZ2FyYWdlLmJtdy5kZYINZ2FyYWdlLmJtdy5lc4INZ2FyYWdlLmJtdy5m
coINZ2FyYWdlLmJtdy5pdIINZ2FyYWdlLmJtdy5sdYINZ2FyYWdlLmJtdy5ubIIN
Z2FyYWdlLmJtdy5ydYIOZ2FyYWdlLm1pbmkuYXSCEWdhcmFnZS5taW5pLmNvLmty
gg5nYXJhZ2UubWluaS5kZYIOZ2FyYWdlLm1pbmkuZXOCDmdhcmFnZS5taW5pLmpw
gg5nYXJhZ2UubWluaS5ubDBMBgNVHSAERTBDMAgGBmeBDAECATA3BgsrBgEEAYLf
EwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0Lm9yZzCC
AQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AESUZS6w7s6vxEAH2Kj+KMDa5oK+2Msx
tT/TM5a1toGoAAABdfQ0uMgAAAQDAEcwRQIgP/Jyoi38iYpMlQnzxgSfad+TcUAp
5HH/FqRRv0oJ7FkCIQDPW1l4xP6Db4bACVzEZtFZAAFGqlRL4bG50P9uF9j63AB1
APZclC/RdzAiFFQYCDCUVo7jTRMZM7/fDC8gC8xO8WTjAAABdfQ0uO4AAAQDAEYw
RAIgfnXRwwcEQQ/M5tVRoKz+jQrpuJ9ybajIUz5LEzMKRusCIG5fmj3+Ft5v/8Ca
dCqZ+N4GvPpkFuHO8A4drdmseUp+MA0GCSqGSIb3DQEBCwUAA4IBAQAeOVN/NbPe
Rshm1y4BYRnUOX+RwZF5h8PfmrV6wwQg3OgAKmSZJ40h8DTNHusGmeF1jjJ3Dl/g
znsYAfwrWhxmLqWOcjyCGf0rYT/OJwMAgz1bt0/LhfNpJ3UZDR1JsB6/CBXWWVBM
uL96JUtouZhP2WtDvq5cEhYNtSBo0V6IotEAurNj/fna8TwQXGAhaUWeIP7Bo7Fq
vWQvFmW0psOsUonPgPIGJJyOP8gFpOLqoOnHHvC01qGqay7m+cHAWExaV8h1yKmY
U0laMQ73DRwqz/fLxugVfeX0wJ6IW50Q+HqKv15ZIMPaUmOyDAq4K43yVH6K8eB7
Plyv6YpV+LZ5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C8WW/Dd4KzSd6BVtYJE
q2z3UYRtJv/+INMeAduOs/yiC7NQJ8eXQTcENDv3bwEcBDBW+ItaeGTAs/UmVjvj
BDrRaANhAinq0x9yx6U1O0y6NweGhYn4gqn1ELhf9lad8JQKIvGSTfd6fR3O+n8r
3jjSLH6ZgW7MmPpt5Zk0DcwF/RI/A9Hevkx+ciJhti2EYwzbeoOFjEhXSlFpXmlc
at4XXlogHvO0JbiWJPuLwd1Fv9KMPA0bUuIYWvh4O/tE53G6hXlQ+6mXSRoqBrH7
1Nf86AO2n2yHQo4voG71zQbc2tutM25yRKjzKw9YkKNSNytjbJQa20RCokNg8Hta
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 351264574274381048227144303871039789475670
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 07:24:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-21 07:24:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'configure.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30320412824816125509892780566305599307517600269843162908168002229700898114965321257735748768605283340543644438895717646514604400331759512053567704209199101552372850599481708709343458950317974006180555757740610677838313545952094230507609846804772824423043980151683968652806559439496070517127540017277658214039779724542372981964135737261447657353574555941197802563429247544045710692599848730393574111847004681413015493999724899906581579199639741242622650188967959609867650861725433816273821738314193696397687672671296383428715924703647431943480212119198921825053046253787481782544971211414714907550756189896860841499377
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							01be6b3edb333f75c115ba85a59ef7a72ff4723c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1293 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000175f434b8c8000004030047304502203ff272a22dfc898a4c9509f3c6049f69df93714029e471ff16a451bf4a09ec59022100cf5b5978c4fe836f86c0095cc466d159000146aa544be1b1b9d0ff6e17d8fadc007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000175f434b8ee000004030046304402207e75d1c30704410fcce6d551a0acfe8d0ae9b89f726da8c8533e4b13330a46eb02206e5f9a3dfe16de6fffc09a742a99f8de06bcfa6416e1cef00e1dadd9ac794a7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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