configure.bmw.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:b2:7c:46:80:1a:fd:eb:93:76:53:5a:fc:de:96:b0:4f:b7 was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=configure.bmw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:b2:7c:46:80:1a:fd:eb:93:76:53:5a:fc:de:96:b0:4f:b7
Serial Number (int): 322072309437752159436734139797215835606967
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: d6:53:e0:a2:de:77:3b:77:cb:43:5a:2d:32:ca:27:43:47:92:79:05
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 00:c2:a6:8e:6f:5c:d9:d3:d8:cb:5d:f2:0a:c5:bc:32:53:f3:c4:8e
Fingerprint (sha256): 19:55:e9:94:51:44:3f:f4:fa:0e:0e:44:17:44:f0:1e:f1:2a:26:7f:03:a2:26:fb:cd:e9:16:b4:78:80:e0:da

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate configure.bmw.com

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for configure.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

configure.bmw.at
configure.bmw.be
configure.bmw.ca
configure.bmw.ch
configure.bmw.cl
configure.bmw.co.jp
configure.bmw.co.kr
configure.bmw.co.uk
configure.bmw.co.za
configure.bmw.com
configure.bmw.com.au
configure.bmw.com.co
configure.bmw.com.mx
configure.bmw.com.pe
configure.bmw.com.tw
configure.bmw.de
configure.bmw.es
configure.bmw.fr
configure.bmw.ie
configure.bmw.it
configure.bmw.lu
configure.bmw.nl
configure.bmw.pl
configure.bmw.pt
configure.bmw.ru
configure.mini.at
configure.mini.be
configure.mini.ch
configure.mini.cl
configure.mini.co.cr
configure.mini.co.kr
configure.mini.co.nz
configure.mini.co.uk
configure.mini.co.za
configure.mini.com
configure.mini.com.ar
configure.mini.com.au
configure.mini.com.br
configure.mini.com.gr
configure.mini.com.mx
configure.mini.com.pl
configure.mini.com.tw
configure.mini.de
configure.mini.dk
configure.mini.es
configure.mini.fi
configure.mini.fr
configure.mini.hu
configure.mini.ie
configure.mini.in
configure.mini.it
configure.mini.jp
configure.mini.lu
configure.mini.nl
configure.mini.no
configure.mini.pt
configure.mini.ro
configure.mini.ru
configure.mini.se
configure.mini.sk
garage.bmw.at
garage.bmw.be
garage.bmw.ca
garage.bmw.ch
garage.bmw.cl
garage.bmw.co.jp
garage.bmw.co.kr
garage.bmw.co.uk
garage.bmw.co.za
garage.bmw.com.au
garage.bmw.com.co
garage.bmw.com.pe
garage.bmw.de
garage.bmw.es
garage.bmw.fr
garage.bmw.it
garage.bmw.lu
garage.bmw.nl
garage.bmw.ru
garage.mini.at
garage.mini.be
garage.mini.ch
garage.mini.co.kr
garage.mini.co.uk
garage.mini.co.za
garage.mini.com.mx
garage.mini.de
garage.mini.es
garage.mini.fr
garage.mini.it
garage.mini.jp
garage.mini.lu
garage.mini.nl
garage.mini.pt
garage.mini.ru

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
individual.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com

Certificate

The complete raw certificate details for configure.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aQrD4a8O8gaX0pL10yt
uBJFYhovLF4KiSdfttpyzycoeofhEhVbWojVbmzjBWdjESyPzldU/2ufZ7QH80l8
LuLVcQAH9AF0LPbp5Gil0wTAEOjIzbYjF58ZXKePCUWX8wca01Y0ACZEiwhSMBU3
vLV2DH05r+Xd64kaf1C2XIw0oC4z53iC16WZvQsRIrJ/e0knUdIY1Y6tKvaU61Pm
jhP34BrT3tP6jTB2ixaAE9X7REiwgx1Dr0GqdDLrrjdPz1yCQx9E5Ii5mJXs93lG
mnHOZBy6GnuCV6c0YM7++2JEvqlZT9EF11GU1eYezr3s7/S4WDpXulaT+sf9JRJb
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322072309437752159436734139797215835606967
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 11:47:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-11 11:47:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'configure.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27979619756921520539271805836903440073462476119682824094017986929071836600653669735153339170701543717119895140251385923985540233035228450118703915131091057238392104699374281094287378979552258136876907204648590589962102252206377999854775781014438618834282024179314988218609867721029339036421471638906751999270210831003957027627659898240650947729600175351801354498661189275003114515366980672526200703921329329983954881525614899033259201610516815771899523766866164547072816866381032027752484556332069544384956583736194313732761696278192653039419985872659477615046269962239453117403825286201607517101404585007186009283433
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d653e0a2de773b77cb435a2d32ca274347927905
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1774 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001720e1305280000040300473045022042a90dc994725538246f8b0b57845234a5d6639444e166d4ed7120388ff77afb022100dc1d0669f80dbbda42d67da6461f97fbc9202b61b0f9ce74cd7676978c83cc4a00760007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c000001720e13054a0000040300473045022100b1fad5f8422bc2b3c21cbf748814db36e2de0b2591f6d1d3088e0a20ec70e5f102200c785fbd942f33767beabc4105cb42f0fd6f496d862ff9ad119990bc9ea1811b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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