www.bmw.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:49:11:9e:dc:ec:45:c0:f9:0a:7f:1b:77:fe:f7:d2:05:8f was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.bmw.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:49:11:9e:dc:ec:45:c0:f9:0a:7f:1b:77:fe:f7:d2:05:8f
Serial Number (int): 286200892320190786757534513869059962045839
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: ca:ae:e4:73:f7:87:51:f9:45:f4:89:4e:e8:58:2e:41:ef:10:97:bc
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:04:8c:8a:e6:6f:bb:63:9a:ab:7b:c4:cd:a1:99:a9:94:81:09:4a
Fingerprint (sha256): 1f:1c:80:d0:bc:e5:32:a5:d3:1e:55:5e:e8:98:f6:a2:a3:8e:d0:5f:9b:10:8e:23:c0:39:56:e9:f4:5e:d9:ba

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.bmw.de

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmw.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cosystatic.bmwgroup.com
dealer.bmw.be
dealer.bmw.lu
dealer.bmw.nl
infonet3-akamai.bmwgroup.com
legacy.bmw.com
marketsupport.bmw.com
qrcode.api.bmw
rsu.bmw.de
static.bmw.com
static2.bmw.com
static3.bmw.com
static4.bmw.com
tracking-api.bmw.com
vision.next100.bmw
wpm.api.bmw
www-int.bmwbkk.de
www.bmw-antilles.fr
www.bmw-bahrain.com
www.bmw-eg.com
www.bmw-iraq.com
www.bmw-jordan.com
www.bmw-lao.la
www.bmw-m.com
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-voli.me
www.bmw-yemen.com
www.bmw.at
www.bmw.az
www.bmw.ba
www.bmw.be
www.bmw.co.il
www.bmw.co.ke
www.bmw.co.kr
www.bmw.co.th
www.bmw.co.uk
www.bmw.co.za
www.bmw.com.al
www.bmw.com.bd
www.bmw.com.bo
www.bmw.com.br
www.bmw.com.co
www.bmw.com.cy
www.bmw.com.do
www.bmw.com.ec
www.bmw.com.ge
www.bmw.com.gt
www.bmw.com.ky
www.bmw.com.mk
www.bmw.com.mo
www.bmw.com.mx
www.bmw.com.ni
www.bmw.com.pa
www.bmw.com.pe
www.bmw.com.py
www.bmw.com.sg
www.bmw.com.sv
www.bmw.com.tr
www.bmw.com.tw
www.bmw.com.uy
www.bmw.com.ve
www.bmw.cw
www.bmw.cz
www.bmw.de
www.bmw.dz
www.bmw.es
www.bmw.fr
www.bmw.gp
www.bmw.hr
www.bmw.is
www.bmw.it
www.bmw.kg
www.bmw.kz
www.bmw.lu
www.bmw.ly
www.bmw.md
www.bmw.mn
www.bmw.mq
www.bmw.nc
www.bmw.nl
www.bmw.ps
www.bmw.re
www.bmw.rs
www.bmw.tm
www.bmw.ua
www.bmwmagazine.com
www.bmwmagazine.de
www.mini.com.hr

Other certificates including the domain name bmw.de

(limited to 100 certificates)
www.dialog.bmw.de
www.jawa-mobil.bmw.de
meinfs.bmw.de
3gio-app-int.bmw.de
www.dialog.bmw.de
www.mini.rs
capig.bmw.de
configure.bmw.com
moss-app-test.bmw.de
ikom-t-int.bmw.de
m.partner.gebrauchtwagen.bmw.de
www.bmw.de
partner.gebrauchtwagen.bmw.de
configure.bmw.com
uctemeasip02.bmwgroup.net
www.jawa-mobil.bmw.de
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
www.m.gebrauchtwagen.bmw.de
ucamersip02.bmwgroup.net
ucsccnsip01.bmwgroup.net
photocollect.bmw.de
www.mini.rs
onlineservices.bmw.de
bmw01.secure.stage.lithium.com
dealer.bmw-int4.com
ucemeasip04.bmwgroup.net
m.partner.gebrauchtwagen.bmw.de
meta-capi.bmw.de
www.gebrauchtwagen.bmw.de
fahr-spar.bmw.de
mein-perfekter.bmw.de
meta-capi.bmw.de
www.m.partner.gebrauchtwagen.bmw.de
jawamobil.bmw.de
mail.bmw.de
bmw01.secure.stage.lithium.com
umfrage.bmw.de
www.bmw.de
bmwi.community
aktion.bmw.de
configure.bmw.com
jawa-mobil.bmw.de
3gio-test.bmw.de
m.gebrauchtwagen.bmw.de
m.gebrauchtwagen.bmw.de
www.bmw.de
moss-app-int.bmw.de
eu12-1.cdn.salesforce-communities.com
www.bmw.at
cardogfi.bmw.de
www.bmw.de
epost-int.bmw.de
www.jawa-mobil.bmw.de
qa-bps.bmw.com
www.bmw.de
partner.gebrauchtwagen.bmw.de
dialog.bmw.de
fahr-spar.bmw.de
www.fahr-spar.bmw.de
ucemeafrepoolws04.bmwgroup.net
onlineservices.bmw.de
meinfs.bmw.de
www.jawamobil.bmw.de
www.jawa-mobil.bmw.de
www.jawamobil.bmw.de
ns-cache.bmw.de
www.m.gebrauchtwagen.bmw.de
meta-capi.bmw.de
audittool.bmw.de
www.bmw.de
sms-interface-int-temp.bmw.de
move.bmw.de
www.jawa-mobil.bmw.de
epost2.bmw.de
onlineservices.bmw.de
eu12-1.cdn.salesforce-communities.com
access14.bmw.de
qa-bps.bmw.com
www.bmw.de
app-nl.bmw.de
ns-cache.bmw.de
m.gebrauchtwagen.bmw.de
www.sms-interface.bmw.de
ucemeasip07.bmwgroup.net
www.m.partner.gebrauchtwagen.bmw.de
mein.perfekter.bmw.de
bmw01.secure.stage.lithium.com
www.bmw.de
www.jawa-mobil.bmw.de
www.mini.rs
eu12-1.cdn.salesforce-communities.com
eu12-1.cdn.salesforce-communities.com
bps.bmw.com
secure.belux.bmw.de
smstqc-interface.bmw.de
www.jawa-mobil.bmw.de
aktion.bmw.de
eu12-1.cdn.salesforce-communities.com
ns-cache.bmw.de

Certificate

The complete raw certificate details for www.bmw.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00h3b4KOMejAriDSUFNk
RRlEKcESpKz0GBN4lUeEK4A/7qUtzNQf6dc7Y2It+1wTgGapHQaWa60aKUOgh0r6
c2a11T4ltv0yqBPDxDhY8XH3enea40hZff8f2/CzYCComvWYBm+6r3NC2eFCp0Gr
q4z6BL/WoiQjlsqQrnDkg0J8WhP6DjKe68l4AydU7iK8Sy3ltIGFimftpekCcpTV
v75EZKT0Z+10NbtshKsUmLnAOYWN4Ee7qvNupUDYWhY+qEA95K50y7xJQ7hAh/Nv
ovs1UxKNjA5LVSnGlbwv5i8/kXt4clQwt7nBG/JJFOnXjJZ3R90Rjiwwf0qiaq9H
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 286200892320190786757534513869059962045839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-05 07:20:35 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-03 07:20:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bmw.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26672016933150976176107431134792552042295763881660093083285000020592698919741398131541207346528512396219350774445145309933003380197602723274846234050829678316002201365965503970221325186983575092033707087132931711410675589310074382022673386749017118413086679288012520871528859492727171517075039951331498367719411693626242191110564658366971025155910821718967120029983645956294870589619830947151868735971987686235376379761110356622727577590531060533163375429894448029821636079779554615202991306000618704793348471871907989101840055195791149887813658572978294709715137426263523534570651090936700031029974918896718661502847
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caaee473f78751f945f4894ee8582e41ef1097bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosystatic.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketsupport.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qrcode.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsu.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static3.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static4.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wpm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-eg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-iraq.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-lao.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-voli.me'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.az'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.il'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.al'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.bo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.cy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.do'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ky'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ni'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.sv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.ve'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.gp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.kg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ly'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.md'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.mn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.mq'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.tm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwmagazine.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mini.com.hr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016c60dda9d900000403004630440220381d1ddd77af7c586ff6dc086460763f29172fba946e9a690cfd839f89a7b7be022028a85b163d163768c529b0a9146295a71aefde62afbff4f28fa1d84182c9cd37007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f4780000016c60dda9f80000040300473045022100cbd0bf0c0778bf7e66f92fabaee9838208d35bd9ca4f7130753ccf279390fc4a0220759cfba9daeea676a65c273bad5cb0fe1704a40ea57d1cf6cb93175f92efd304
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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