h5vco-ux-test.bmwgroup.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2b:f5:84:9d:77:36:63:fe:f8:a5:9f:6d was issued on by GlobalSign nv-sa.

With 77 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:f5:84:9d:77:36:63:fe:f8:a5:9f:6d
Serial Number (int): 13604668505228143754536656749
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 85:c6:45:5d:58:ed:3f:dd:96:59:cd:e6:e7:df:32:f3:93:6d:42:55
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 66:9d:6e:77:a1:d2:bd:8d:60:ba:f5:1c:78:d3:92:3c:31:8b:34:4a
Fingerprint (sha256): 28:ac:2a:f5:21:6e:66:9b:ae:e8:d2:42:81:42:32:ca:c6:a6:8b:7d:3c:32:59:fb:c9:36:58:18:0a:1b:06:7b

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate h5vco-ux-test.bmwgroup.com

77

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for h5vco-ux-test.bmwgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

h5vco-ux-test.bmwgroup.com
build-my-bike-test.bmw-motorrad.co.uk
configurador-test.bmw-motorrad.es
configurador-test.bmw-motorrad.pt
configurateur-test.bmw-motorrad.be
configurateur-test.bmw-motorrad.ch
configurateur-test.bmw-motorrad.fr
configurateur-test.bmw-motorrad.lu
configurator-test.bmw-motorrad.be
configurator-test.bmw-motorrad.com
configurator-test.bmw-motorrad.gr
configurator-test.bmw-motorrad.it
configurator-test.bmw-motorrad.nl
configurator-test.bmw-motorrad.ru
configuratore-test.bmw-motorrad.ch
konfigurator-test.bmw-motorrad.at
konfigurator-test.bmw-motorrad.ch
konfigurator-test.bmw-motorrad.de
konfigurator-test.bmw-motorrad.lu
ma-test.bmw-motorrad.be
ma-test.bmw-motorrad.ch
ma-test.bmw-motorrad.lu
mein-test.bmw-motorrad.at
mein-test.bmw-motorrad.ch
mein-test.bmw-motorrad.de
mein-test.bmw-motorrad.lu
mi-test.bmw-motorrad.es
mia-test.bmw-motorrad.ch
mijn-test.bmw-motorrad.be
mijn-test.bmw-motorrad.nl
mon-test.bmw-motorrad.fr
my-test.bmw-motorrad.co.uk
my-test.bmw-motorrad.com
my-test.bmw-motorrad.gr
my-test.bmw-motorrad.it
my-test.bmw-motorrad.pt
my-test.bmw-motorrad.ru
configurador-br-test.bmw-motorrad.com
build-my-bike-test.bmwmotorrad.com.au
konfigurator-test.bmw-motorrad.pl
konfigurator-test.bmw-motorrad.hu
konfigurator-test.bmw-motorrad.si
konfigurator-test.bmw-motorrad.bg
konfigurator-test.bmw-motorrad.cz
konfigurator-test.bmw-motorrad.sk
configurator-test.bmwmotorrad.co.kr
minha-br-test.bmw-motorrad.com
my-test.bmwmotorrad.com.au
moj-test.bmw-motorrad.pl
my-test.bmw-motorrad.hu
moj-test.bmw-motorrad.si
my-test.bmw-motorrad.bg
muj-test.bmw-motorrad.cz
moj-test.bmw-motorrad.sk
my-test.bmwmotorrad.co.kr
my-en-test.bmw-motorrad.co.th
configurator-en-test.bmw-motorrad.co.th
my-th-test.bmw-motorrad.co.th
configurator-th-test.bmw-motorrad.co.th
my-test.bmw-motorrad.ca
configurator-test.bmw-motorrad.ca
mon-test.bmw-motorrad.ca
configurateur-test.bmw-motorrad.ca
my-test.bmw-motorrad.in
configurator-test.bmw-motorrad.in
my-test.bmw-motorrad.com.mx
configurator-test.bmw-motorrad.com.mx
mi-test.bmw-motorrad.com.ar
configurador-test.bmw-motorrad.com.ar
configurator-test.bmw-motorrad.com.my
my-test.bmw-motorrad.com.my
configurator-test.bmwmotorcycles.com
configurator-test.bmw-motorrad.jp
my-test.bmw-motorrad.jp
h5vco-ux-test-dev.bmwgroup.com
h5vco-ux-config-test.bmwgroup.com
h5vco-ux-config-test-dev.bmwgroup.com

Other certificates including the domain name bmwgroup.com

(limited to 100 certificates)
cosy-int.bmwgroup.com
cuvedat.bmwgroup.com
bsi-service-wen.bmwgroup.com
ebest-gf5-int2.bmwgroup.com
spa-int.sfchina.bmw.com.cn
myair-bdr-us.bmwgroup.com
mein-test.bmwgroup.com
aftersales-configuration.bmwgroup.com
xpita-green.bmwgroup.com
air-int.bmwgroup.com
api.mobilitygraph.bmwgroup.com
e4ni3.bmwgroup.com
drift.bmwgroup.com
sgate2-int-apac.bmwgroup.com
p44-tracking-data-prod.bmwgroup.com
wissensfinder.bmwgroup.com
sparc-int.bmwgroup.com
e-180.com
df3test-bmwinfobahn.bmwgroup.com
lcs-int.bmwgroup.com
apisec.bmwgroup.com
srpmm-api-i.bmwgroup.com
ispanext-user-int-gf4.bmwgroup.com
rwebmeter.bmwgroup.com
aida-i.bmwgroup.com
nachhaltigkeit-newsletter.bmwgroup.com
dealerportalsg-int.bmwgroup.com
zadea-i.bmwgroup.com
spoa-int-2.bmwgroup.com
h5vco-bmw-test.bmwgroup.com
swg-mx.bmwgroup.com
uat-infobahn.bmwgroup.com
alscore-int.bmwgroup.com
dfegateway-i2.bmwgroup.com
csp-gft.bmwgroup.com
carver.bmwgroup.com
dealerservices-t.bmwgroup.com
tmsi-i.bmwgroup.com
osm-cloud-uat-kr.bmwgroup.com
vcs-gf4-t.bmwgroup.com
stabi.bmwgroup.com
h5vco.bmwgroup.com
plw-prod1.bmwgroup.com
h5vco-int.bmwgroup.com
osm-cloud-int-fed-eu.bmwgroup.com
eccza.bmwgroup.com
b2dua4.bmwgroup.com
conrecordtest.bmwgroup.com
srmza.bmwgroup.com
ilz-device-qa.bmwgroup.com
passworddev.bmwgroup.com
alclaims-test.bmwgroup.com
ispanext-user-prod-us-ig-weam.bmwgroup.com
zeus-neu.bmwgroup.com
ddaus-p-gf4.bmwgroup.com
cmscn-int.bmwgroup.com
kai-user-qa-eam.bmwgroup.com
topdrive-i.bmwgroup.com
mocu-int.bmwgroup.com
bch.eu-central-1.test.iis.connected.bmw
dealerservices-test.bmwgroup.com
oasis.bmwgroup.com
www.charging.bmwgroup.com
myc-profile-int.bmwgroup.com
dealercockpit-aos.bmwgroup.com
cargo-auth-ddr-int.bmwgroup.com
vcommus.bmwgroup.com
mediapool-i3.bmwgroup.com
nasf-as-tp-technical-campaign.bmwgroup.com
alertnowpbf00.bmwgroup.com
acc-fa-be-alph.bmwgroup.com
prod-mybmw-auth.bmwgroup.com
msdcrm365-int.bmwgroup.com
noaifa.bmwgroup.com
eaina-wen-int.bmwgroup.com
infonet3.bmwgroup.com
test.mini-mx.bmwgroup.com
www.bmw.de
trz-device-qa-us.bmwgroup.com
www.bmw.com
fsconnect-int-next.bmwgroup.com
b2dua-int.bmwgroup.com
gqs-i.bmwgroup.com
air-services-qa1-wen-basic.bmwgroup.com
ispanext-device-qa-cn-weam.bmwgroup.com
pita-dev.bmwgroup.com
usp22-test.bmwgroup.com
myair-bdr-qa2.bmwgroup.com
ics.bmwgroup.com
ispanext-user-int-weam.bmwgroup.com
swg-mx.bmwgroup.com
apisec-i.bmwgroup.com
ispanext-user-qa-ig-weam.bmwgroup.com
vcsus-t.bmwgroup.com
uctemeasip02.bmwgroup.net
air-services-b2i-int.bmwgroup.com
crowd-innovation.bmwgroup.com
ivpbg-new.bmwgroup.com
ult-test.bmwgroup.com
cfs-ch-int2.bmwgroup.com

Certificate

The complete raw certificate details for h5vco-ux-test.bmwgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6HngyqQeZinLOZBAkUk6
yA7M6d4hsgoBYVTL5WCkUFFGEB/wM8eGAg24PEjCmiih/teE3ZNYvt3AJaYqjTGS
SlTuwhxyIyiwej63DUp5xEkL9+MVsB20GQUhZylZihfwjl5oK+/x03obz/frKLRo
72qLcOwEb0DG8MuWLc/F+kubyccBna4QVXqle0DUZE19u8cHbwo3dIUVIkmp5tlu
RvoIzmqorCO1xywljUCiJnJ8O16P1oflKRRPsbNbJYxFmMfMdmXA4WWRVmnWIrcA
omQ9bnNcYSJMkIEd09uuc5NG0cMCYcRdzMIBuywQr3lF0aSzwFuizkkpUtLpfJzY
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13604668505228143754536656749
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-25 17:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-27 17:11:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'h5vco-ux-test.bmwgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29347387079289086651282229101019796332898769618724235629516521681216413729156834463827890793624803853980871027233468270113461914397204457501909787060724313058726525609148115793932215638538749399484741620394126337861390219868782901690906272722884598653950625136005629355492815396356731992896467743643107026292751062038298097060489901083554945058525362203154245421780154732047873922279402595826228488538749351372789719441697550700291497707810346484773333285431370750418505439036136248668073076743591818352368344908401533583968580048520725190285599938323069981538452706626004457266099440954825728646091188970182420518987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2440 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h5vco-ux-test.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-my-bike-test.bmw-motorrad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurador-test.bmw-motorrad.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurador-test.bmw-motorrad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur-test.bmw-motorrad.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur-test.bmw-motorrad.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur-test.bmw-motorrad.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configuratore-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-test.bmw-motorrad.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ma-test.bmw-motorrad.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-test.bmw-motorrad.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-test.bmw-motorrad.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mein-test.bmw-motorrad.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-test.bmw-motorrad.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mia-test.bmw-motorrad.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn-test.bmw-motorrad.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mijn-test.bmw-motorrad.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-test.bmw-motorrad.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurador-br-test.bmw-motorrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'build-my-bike-test.bmwmotorrad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konfigurator-test.bmw-motorrad.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmwmotorrad.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'minha-br-test.bmw-motorrad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmwmotorrad.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-test.bmw-motorrad.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-test.bmw-motorrad.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muj-test.bmw-motorrad.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moj-test.bmw-motorrad.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmwmotorrad.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-en-test.bmw-motorrad.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-en-test.bmw-motorrad.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-th-test.bmw-motorrad.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-th-test.bmw-motorrad.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-test.bmw-motorrad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurateur-test.bmw-motorrad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi-test.bmw-motorrad.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurador-test.bmw-motorrad.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmwmotorcycles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'configurator-test.bmw-motorrad.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-test.bmw-motorrad.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h5vco-ux-test-dev.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h5vco-ux-config-test.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'h5vco-ux-config-test-dev.bmwgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							85c6455d58ed3fdd9659cde6e7df32f3936d4255
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001760063391f00000403004730450220721b5ca0efc668fa0719c34079b1c62d38902e9e523747ce4950908d8f1b841f022100fafe2d27b765d76661d3e201d5e932dc0884e51f17f3af311f299042a672dce7007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017600633bf3000004030046304402205ab1f05ff06a8652a94e1e57246358a7940cd5005fb025de668222028fdf95b802200144990d398e66e914ed8231646ae630c60e2a5505855a57257971fab15e2803
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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