configure.bmw.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:07:86:4b:18:82:3f:89:87:21:b9:c7:d1:a3:10:24:27:d5 was issued on by Let's Encrypt.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=configure.bmw.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:07:86:4b:18:82:3f:89:87:21:b9:c7:d1:a3:10:24:27:d5
Serial Number (int): 263897340834524033454248661339094143739861
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: de:a4:82:ad:31:36:73:91:9e:da:80:55:c2:63:35:bb:d4:dd:31:66
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 7a:bb:5b:73:a7:68:6e:91:66:c5:58:83:a3:d3:aa:07:e2:ff:94:30
Fingerprint (sha256): 1c:c6:2f:9e:d8:33:9c:6a:49:03:71:82:7e:30:bd:97:57:1c:48:ca:69:28:59:16:fb:a6:50:0f:64:45:da:c0

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate configure.bmw.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for configure.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

con.bmw.at
con.mini.at
configure.bmw.at
configure.bmw.be
configure.bmw.ca
configure.bmw.cl
configure.bmw.co.jp
configure.bmw.co.kr
configure.bmw.co.uk
configure.bmw.co.za
configure.bmw.com
configure.bmw.com.au
configure.bmw.com.co
configure.bmw.com.pe
configure.bmw.com.tr
configure.bmw.de
configure.bmw.es
configure.bmw.fr
configure.bmw.it
configure.bmw.lu
configure.bmw.nl
configure.bmw.ru
configure.mini.at
configure.mini.be
configure.mini.co.kr
configure.mini.co.uk
configure.mini.co.za
configure.mini.com
configure.mini.com.mx
configure.mini.de
configure.mini.es
configure.mini.fr
configure.mini.it
configure.mini.jp
configure.mini.lu
configure.mini.nl
configure.mini.pt
configure.mini.ru
garage.bmw.at
garage.bmw.be
garage.bmw.ca
garage.bmw.cl
garage.bmw.co.jp
garage.bmw.co.kr
garage.bmw.co.uk
garage.bmw.co.za
garage.bmw.com.au
garage.bmw.com.co
garage.bmw.com.pe
garage.bmw.com.tr
garage.bmw.de
garage.bmw.es
garage.bmw.fr
garage.bmw.it
garage.bmw.lu
garage.bmw.nl
garage.bmw.ru
garage.mini.at
garage.mini.be
garage.mini.co.kr
garage.mini.co.uk
garage.mini.co.za
garage.mini.com.mx
garage.mini.de
garage.mini.es
garage.mini.fr
garage.mini.it
garage.mini.jp
garage.mini.lu
garage.mini.nl
garage.mini.pt
garage.mini.ru

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
individual.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com

Certificate

The complete raw certificate details for configure.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4R4bsfR7u64Lf5GQLTov
2v+0EMYbhbPvT1smIkzfeiouc8Xd4bEY1u0iwxjXeHkuO4xOfXFS1b9yJsCBlSmq
P7EUgtJiEWAH047XwsxKTZuUA0F22uaAQvC1e/y+w0ND/gxXJBlUzEPwZU3+sVIj
zmKyTE7CgfRQyyOI1yeH5Bb+c0EJjdLCSK7ipBpZ6qcAX6ZwcBeHXsPI/mS883Ru
0MnHs/mUXx7g4VXtX3le3mt1MotYZyjqcPwm35jj9JdcILRYJb+ArLCg6t8OoEge
ZFmqRd+Jz6nslXv/tFMKEFneRxc1Tt4qtphTn0htEtliJEFthFDVXbr4QMskVmpY
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 263897340834524033454248661339094143739861
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 16:36:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-24 16:36:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'configure.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28418465516308211490347819791484163613011287988888997637492750820351828296964751860401434915939146091764861246956235610989891438869363090495762058624481012956468272921992209059538521573109123162972430992350358749342628111543400092357457799245876340561804752794488744530513790440731035566326385118208476124672928568180670442246444628670362524364564614266147363278523748756947651527419462245693573899793810049172579042800546043746391421735923171991628930051248618442563905766306915033390270198059422216434076713437842911339564539316043752635330715795050693785597845384504152644043565170450843683881314971042562609666203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dea482ad313673919eda8055c26335bbd4dd3166
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1302 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'con.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configure.mini.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'garage.mini.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc560000016880eeecbd0000040300463044022074f401d1a9ef10e11b0b51e9d1b089abe3fb69107b199b39e96122c1ff2be18002202879a3da87d0595fda30e2a4b0a3658e04823d09396295439fc64800538642d7007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016880eeecb70000040300473045022100b81e185a2ee10de5eeec2f891f99d9b5b84c09fc843fda35e71e23b750ff428002205541d64ba845ce9ecc661d666e7a810fa342c177770fff1460dc61aa06b2ff4a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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