www.bmw.de
Issued by Let's Encrypt Authority X3
About this certificate
This digital certificate with serial number 03:2d:f6:36:f3:bf:5b:0c:7f:7b:74:17:8c:8c:bc:07:1d:36 was issued on by Let's Encrypt.
With 56 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.bmw.de
Let's Encrypt
Organization:
Let's Encrypt
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 03:2d:f6:36:f3:bf:5b:0c:7f:7b:74:17:8c:8c:bc:07:1d:36Serial Number (int): 276976839721502711953751670456891465997622
Serial Number lenght: 138 bits, 18 octets
SubjectKeyId: 97:68:3c:cf:a0:8b:37:77:11:af:96:fe:75:4d:12:6c:e7:03:0b:36
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1
Fingerprint (sha1): f0:52:70:17:7b:5e:3d:83:e8:89:e4:c3:b9:15:49:67:c3:a2:4d:4c
Fingerprint (sha256): 17:cc:b4:cd:92:30:85:92:3c:09:12:b0:26:b0:27:61:0a:97:02:1e:60:fe:3c:da:a9:ca:f2:87:db:07:12:81
Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/
Revocation information
OCSP Server: http://ocsp.int-x3.letsencrypt.orgCheck the revocation status for certificate www.bmw.de
56
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.bmw.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bmwi-some.bmw.com
con.mini.at
cosystatic.bmwgroup.com
dtmassets.bmw.com
infonet3-akamai.bmwgroup.com
legacy.bmw.com
m.bmw.at
m.bmw.be
m.bmw.de
m.bmw.lu
marketsupport.bmw.com
qrcode.api.bmw
some.bmw.com
ssl.com.mini
static.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api.bmw.com
vision.next100.bmw
wpm.api.bmw
www.bmw-antilles.fr
www.bmw-bahrain.com
www.bmw-jordan.com
www.bmw-lao.la
www.bmw-m.com
www.bmw-mountains.com
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-voli.me
www.bmw-yemen.com
www.bmw.at
www.bmw.az
www.bmw.ba
www.bmw.co.il
www.bmw.co.ke
www.bmw.com.al
www.bmw.com.ge
www.bmw.com.mk
www.bmw.de
www.bmw.dz
www.bmw.kz
www.bmw.ly
www.bmw.nc
www.bmw.ps
www.bmw.re
www.bmw.ua
www.campaigns.mini
www.m1.mulo-dev.com
www.m1.mulo-int.com
www.m1.mulo-ref.com
www.mini.com.hr
www.minicaribbean.com
www.p113.mini.com
www.p54.mini.com
www.p56.mini.com
con.mini.at
cosystatic.bmwgroup.com
dtmassets.bmw.com
infonet3-akamai.bmwgroup.com
legacy.bmw.com
m.bmw.at
m.bmw.be
m.bmw.de
m.bmw.lu
marketsupport.bmw.com
qrcode.api.bmw
some.bmw.com
ssl.com.mini
static.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api.bmw.com
vision.next100.bmw
wpm.api.bmw
www.bmw-antilles.fr
www.bmw-bahrain.com
www.bmw-jordan.com
www.bmw-lao.la
www.bmw-m.com
www.bmw-mountains.com
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-voli.me
www.bmw-yemen.com
www.bmw.at
www.bmw.az
www.bmw.ba
www.bmw.co.il
www.bmw.co.ke
www.bmw.com.al
www.bmw.com.ge
www.bmw.com.mk
www.bmw.de
www.bmw.dz
www.bmw.kz
www.bmw.ly
www.bmw.nc
www.bmw.ps
www.bmw.re
www.bmw.ua
www.campaigns.mini
www.m1.mulo-dev.com
www.m1.mulo-int.com
www.m1.mulo-ref.com
www.mini.com.hr
www.minicaribbean.com
www.p113.mini.com
www.p54.mini.com
www.p56.mini.com
Other certificates including the domain name bmw.de
(limited to 100 certificates)
www.dialog.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de
Certificate
The complete raw certificate details for www.bmw.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIIqjCCB5KgAwIBAgISAy32NvO/Wwx/e3QXjIy8Bx02MA0GCSqGSIb3DQEBCwUA MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA3MTExNTAxMzNaFw0x ODEwMDkxNTAxMzNaMBUxEzARBgNVBAMTCnd3dy5ibXcuZGUwggEiMA0GCSqGSIb3 DQEBAQUAA4IBDwAwggEKAoIBAQDcV+Cx/dhRlTUK8zEbiuKhJ2fOk/68x1fEMHBh 1qE2NfMscMr19xEr3CUbvWIvgKbB94RG2/Dy4yH2+gwi7rQPwO4UkDd9Kw2NU+ko qU3oYM2gj65dyKvikiPxKjZiGVAobFqD97kZic5l8t2m/inKY9wx9Xiy0cGlJhrR g0NPSFDS3KQMDED5tuk2eWqc/0VRxlPV5A45Nf64zi6+MtQMLIY7/1ekSmcTm8E2 1p9bhfV1QO9w5GVS4QT/D6FR6ANDp7qprd4xtaF+0UjkKhRmazoqXv1OYZFUeRC8 nY5SIVuNFEgqEY5W7jzbvd+1KHQy4Aq/iOakucmhXxjX6ySfAgMBAAGjggW9MIIF uTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFJdoPM+gizd3Ea+W/nVNEmznAws2MB8G A1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAu BggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAv BggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8w ggOxBgNVHREEggOoMIIDpIIRYm13aS1zb21lLmJtdy5jb22CC2Nvbi5taW5pLmF0 ghdjb3N5c3RhdGljLmJtd2dyb3VwLmNvbYIRZHRtYXNzZXRzLmJtdy5jb22CHGlu Zm9uZXQzLWFrYW1haS5ibXdncm91cC5jb22CDmxlZ2FjeS5ibXcuY29tgghtLmJt dy5hdIIIbS5ibXcuYmWCCG0uYm13LmRlgghtLmJtdy5sdYIVbWFya2V0c3VwcG9y dC5ibXcuY29tgg5xcmNvZGUuYXBpLmJtd4IMc29tZS5ibXcuY29tggxzc2wuY29t Lm1pbmmCDnN0YXRpYy5ibXcuY29tgg9zdGF0aWMyLmJtdy5jb22CD3N0YXRpYzMu Ym13LmNvbYIPc3RhdGljNC5ibXcuY29tghR0cmFja2luZy1hcGkuYm13LmNvbYIS dmlzaW9uLm5leHQxMDAuYm13ggt3cG0uYXBpLmJtd4ITd3d3LmJtdy1hbnRpbGxl cy5mcoITd3d3LmJtdy1iYWhyYWluLmNvbYISd3d3LmJtdy1qb3JkYW4uY29tgg53 d3cuYm13LWxhby5sYYINd3d3LmJtdy1tLmNvbYIVd3d3LmJtdy1tb3VudGFpbnMu Y29tghJ3d3cuYm13LXRhaGl0aS5jb22CE3d3dy5ibXctdHVuaXNpYS5jb22CD3d3 dy5ibXctdm9saS5tZYIRd3d3LmJtdy15ZW1lbi5jb22CCnd3dy5ibXcuYXSCCnd3 dy5ibXcuYXqCCnd3dy5ibXcuYmGCDXd3dy5ibXcuY28uaWyCDXd3dy5ibXcuY28u a2WCDnd3dy5ibXcuY29tLmFsgg53d3cuYm13LmNvbS5nZYIOd3d3LmJtdy5jb20u bWuCCnd3dy5ibXcuZGWCCnd3dy5ibXcuZHqCCnd3dy5ibXcua3qCCnd3dy5ibXcu bHmCCnd3dy5ibXcubmOCCnd3dy5ibXcucHOCCnd3dy5ibXcucmWCCnd3dy5ibXcu dWGCEnd3dy5jYW1wYWlnbnMubWluaYITd3d3Lm0xLm11bG8tZGV2LmNvbYITd3d3 Lm0xLm11bG8taW50LmNvbYITd3d3Lm0xLm11bG8tcmVmLmNvbYIPd3d3Lm1pbmku Y29tLmhyghV3d3cubWluaWNhcmliYmVhbi5jb22CEXd3dy5wMTEzLm1pbmkuY29t ghB3d3cucDU0Lm1pbmkuY29tghB3d3cucDU2Lm1pbmkuY29tMIH+BgNVHSAEgfYw gfMwCAYGZ4EMAQIBMIHmBgsrBgEEAYLfEwEBATCB1jAmBggrBgEFBQcCARYaaHR0 cDovL2Nwcy5sZXRzZW5jcnlwdC5vcmcwgasGCCsGAQUFBwICMIGeDIGbVGhpcyBD ZXJ0aWZpY2F0ZSBtYXkgb25seSBiZSByZWxpZWQgdXBvbiBieSBSZWx5aW5nIFBh cnRpZXMgYW5kIG9ubHkgaW4gYWNjb3JkYW5jZSB3aXRoIHRoZSBDZXJ0aWZpY2F0 ZSBQb2xpY3kgZm91bmQgYXQgaHR0cHM6Ly9sZXRzZW5jcnlwdC5vcmcvcmVwb3Np dG9yeS8wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAH6w Qo3e9QkYdYWeh3vpLPbNnEDxcFvkQXvQMtk7nao/ODHblSEtP7KSycE6IPI0S+mv qEaxlUsIIC+boZU0d9+vk4F526ZyAcYcjvhFli0jSf5/knEyiNR3sv9qG4W47QCI 6+ACLYYYP7As738PocTOZ4n8EFq6CyCLlcUFXZAeTKZti2AsDptQbCI0ZVrydc8i NBGX6d6u12lC7C0N5Dl1npGdfDlX9Daw2SRgoCR0SPg0jWjhVKk1Yyyn5WsGui2Y rxYimmfNF7EOXcVu8QzFhShzssG2TTs1ppKkPHtEMfYOOTCTNQzK5ZkJsNAoyPjw EmDPU83cnJXvxGHX6lM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Ffgsf3YUZU1CvMxG4ri oSdnzpP+vMdXxDBwYdahNjXzLHDK9fcRK9wlG71iL4CmwfeERtvw8uMh9voMIu60 D8DuFJA3fSsNjVPpKKlN6GDNoI+uXcir4pIj8So2YhlQKGxag/e5GYnOZfLdpv4p ymPcMfV4stHBpSYa0YNDT0hQ0tykDAxA+bbpNnlqnP9FUcZT1eQOOTX+uM4uvjLU DCyGO/9XpEpnE5vBNtafW4X1dUDvcORlUuEE/w+hUegDQ6e6qa3eMbWhftFI5CoU Zms6Kl79TmGRVHkQvJ2OUiFbjRRIKhGOVu48273ftSh0MuAKv4jmpLnJoV8Y1+sk nwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 276976839721502711953751670456891465997622 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 15:01:33 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 15:01:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27815761209345592386521040102689506325705962108578104127446365755449901375441130956566519730295080273501986624390425251018604513063177029192698345988793107332329317115077339977687129239842117523675016475827358635608907327996269087254485321639317018717162200319790459648039858537589081649941170641600070567077162148530991235932979453727719400803016212653365050251947695120549628403157931358927249292532510250877137911687458221577752417726239712502311907965784127343415568494030816550660541313848385316759270339556631646753969663427362495511960306921893514263992890039464284677554084713716589057969749220276369084851359 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 97683ccfa08b377711af96fe754d126ce7030b36 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (936 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwi-some.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mini.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosystatic.bmwgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dtmassets.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.be' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.lu' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketsupport.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'some.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.com.mini' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-lao.la' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-m.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-mountains.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-voli.me' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.at' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.az' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.il' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.ke' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.al' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ge' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.kz' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ly' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nc' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ua' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.campaigns.mini' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-dev.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-int.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.mulo-ref.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini.com.hr' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.minicaribbean.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p113.mini.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p54.mini.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p56.mini.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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