www-origin-s2.mini-int3.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4a:36:47:14:87:70:e9:65:7f:26:59:a5 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:36:47:14:87:70:e9:65:7f:26:59:a5
Serial Number (int): 22967508387753447294715189669
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 52:05:15:54:c3:0f:40:7e:d5:5a:03:c8:34:31:fe:e3:e4:2f:a0:9d
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): b1:3b:da:58:72:25:f7:bb:fd:b9:a0:4c:5d:19:25:fc:d2:00:66:e3
Fingerprint (sha256): 22:6a:49:51:88:c5:b6:c4:7f:dd:df:12:14:e6:46:3c:25:4b:ee:ac:0a:a6:3c:e7:46:8e:10:39:24:51:89:fe

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www-origin-s2.mini-int3.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-origin-s2.mini-int3.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-origin-s2.mini-int3.com

Other certificates including the domain name mini-int3.com

(limited to 100 certificates)
con.api.mini
www.mini.com.bo
bmw-int1.com
bmw-int1.com
www.mini.rs
con.api.mini
bmw-int1.com
bmw-int1.com
con.api.mini
www.mini.com.bo
bmw-int1.com
www.m1.bmw-int6.com
con.api.mini
bmw-int1.com
bmw-int1.com
bmw-int1.com
www.p93.mini.com
bmw-int1.com
con.api.mini
bmw-int1.com
www.p93.mini.com
www.mini.rs
con.api.mini
bmw-int1.com
bmw-int1.com
www.p93.mini.com
bmw-int1.com
www.mini.com.bo
bmw-int1.com
www.mini.rs
bmw-int1.com
bmw-int1.com
bmw-int1.com
www.m60.mini-int1.com
bmw-int1.com
www.m1.bmw-int6.com
bmw-int1.com
www.p93.mini.com
www.p93.mini.com
www.p93.mini.com
con.api.mini
www-origin-s2.mini-int3.com
bmw-int1.com
www-origin-s2.mini-int3.com
con.api.mini
www.mini.com.bo
www.m1.bmw-int6.com
con.api.mini
bmw-int1.com
con.api.mini
www.m1.bmw-int6.com
www.p93.mini.com
con.api.mini
bmw-int1.com
con.api.mini
www.p93.mini.com
www.mini-int3.com
bmw-int1.com
www.mini.com.bo
www.p93.mini.com
www.mini-int3.com
www.mini.com.bo
www.mini.com.bo
bmw-int1.com
bmw-int1.com
www.mini.com.bo
www.mini.rs
www.mini.com.bo
www.mini.com.ve
www.mini.com.ve
www.p93.mini.com
www.mini-int3.com
www.m1.bmw-int6.com
www.mini.com.bo
www.mini.com.ve
www.mini.com.bo
bmw-int1.com
bmw-int1.com
bmw-int1.com
www.p93.mini.com
www.mini.rs
con.api.mini
www.mini.rs
www.mini-int3.com
con.api.mini
www.mini.rs
bmw-int1.com
www-origin-s2-a7.mini-int3.com
www.mini.rs
www.mini.rs
bmw-int1.com
www.mini.com.bo
con.api.mini
con.api.mini
www-origin-s2-a7.mini-int3.com
www-origin-s2-a7.mini-int3.com
www.mini.com.bo
con.api.mini
bmw-int1.com
bmw-int1.com

Certificate

The complete raw certificate details for www-origin-s2.mini-int3.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3JBhMwZOcr/31ald9kkG
/3bUZheN6OytvOj1GO1wJ7iTatfiocaqdeNRbMPsvHqngYMQu7WtxUl2mV1ibsuL
cbrYw9VJTOy3i04/UJvJQ7A8+ms2kMJBr9ADsR+j4aJukGJ4KqJLECZmF+NMqV90
dxx1OLa8h8nuG5d1NZbHuSlmCylhFEefGA78X7mME5NcnkurIRjB3hiKPjFyoLiJ
aUnOP+hn2C2HpiS7UjeWozVcdkWbCQXJgsydNbpGFor3ZWnymJsVL6weU+5pFKJF
VI9VsKZDZQIyesoubi6Clxt6HkcImOtwYV00MgfndPnD1dK7zW9XsB/EXNwBDZFq
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22967508387753447294715189669
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-17 21:34:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-19 21:34:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-origin-s2.mini-int3.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27843623368641227393887435961528769829891816591709012719553385604653127777479572400474519879701246853232426561518410423433253999789139231063200186842051123774941710693719830591902610399964766450184929144181863417987275074506822170414492025798433874025473167001690670515638596267688017921945973542203500368688334412759327170856707581571250668938755386421607329732625524806883674384846989514455248479786787318474262410228955992692900586899267809660216073341469255550668277573269482637402597505029437804561081119423617104432190252136077307936313610771120001365145437708892641832170420826455244742725708312892546984536663
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin-s2.mini-int3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							52051554c30f407ed55a03c83431fee3e42fa09d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001749dfd644e0000040300463044022020e27474810a744e6dbc327caa1cf76960746fce52943c47da13809373be1d6502203c653e51990d3fcb9e0e70745d7208bb03317c3e8da93c1c15f234649bca10410077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001749dfd6446000004030048304602210088c246697236623bbb30dcbc6ce6326437b2ee376c0e829c868cb6264e937955022100c3268f2ec9e6680cbcd306c0ea78613967ff71efe607ff2c68c9c3f9f7d7a237
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a401b5237084d1220c730d5cf92d76bf2c735bf540f53a0c867f5b9b987b7be4739fe32cb3a2ea25e735c2be7b82e7f9d9cd3f42eacb7b32eddd1fd7159915f6e22b35bd3a5590ea7b32a163ca9668246d6202ff63ce40630895515ab9d66efdf68bfbfd878c00d8ebbb299085722aedbc6acd7abfdd1ac7657d2ed7906db11a739e5ea1320224afbe5cc4b5553be55cb8060ec2502c0dd506e84782eae1185767c647f86781ea939754d4d1271de0fb6bb71c50ae438c8e9993312b5ed14fb7f660b7cad171164569a009bbbc50786ceed12513ad59712a241905f38480e7f41db6f475756fe1c164f91f8b7adf3838b8017a1165f45f7229af10446d2167f1