redirect-letsencrypt4.dealermaster-de.bmw

Issued by R3

About this certificate

This digital certificate with serial number 03:45:1a:1e:a4:b6:b8:7e:27:72:74:7b:a8:47:76:44:23:11 was issued on by Let's Encrypt.

With 64 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=redirect-letsencrypt4.dealermaster-de.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:45:1a:1e:a4:b6:b8:7e:27:72:74:7b:a8:47:76:44:23:11
Serial Number (int): 284851060150413456105582974367817208701713
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 48:ea:15:0e:41:66:b4:4e:2d:46:64:b8:ec:83:66:a1:a3:8e:86:4e
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 05:96:f3:e2:21:94:88:c0:89:2f:43:be:ab:0d:9d:6f:c6:25:16:1b
Fingerprint (sha256): 2b:98:0e:f9:c1:74:3e:5b:0e:21:2d:4d:f2:db:1f:90:96:6d:5d:10:e6:71:89:6a:c6:7d:05:9b:8a:3d:98:6e

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redirect-letsencrypt4.dealermaster-de.bmw

64

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirect-letsencrypt4.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autohaus-reier.com
autohaus-reier.de
autohaus-schmauser.de
automobile-goernitz.de
autoschmidt-saarburg.de
bmw-auto-eichhorn.de
bmw-autohaus-gottstein.de
bmw-autohaus-matthes.de
bmw-bothe.de
bmw-bundk.de
bmw-emmerich.de
bmw-fritze.de
bmw-hans-brandenburg.de
bmw-heermann-rhein.de
bmw-kainz.de
bmw-m-suedwest.de
bmw-motorrad-event.de
bmw-reier.de
bmw-rhein-bodensee.de
bmw-rhein-ludwigsburg.de
bmw-schmid-elzach.de
bmw-service-ah-erhardt.de
bmw-service-auto-weiss.de
bmw-service-autohaus-feil.de
bmw-service-autohaus-mm.de
bmw-service-autohausskjellet.de
bmw-service-bothe.de
bmw-service-fetzer.de
bmw-service-fritz.de
bmw-service-goernitz.de
bmw-service-grotewohlt.de
bmw-service-guelke.de
bmw-service-hannemann.de
bmw-service-haupt.de
bmw-service-isernhagen.de
bmw-service-jungmayer.de
bmw-service-knopf.de
bmw-service-langlinderer.de
bmw-service-maier.de
bmw-service-mueller-hollfeld.de
bmw-service-neumeier-seidl.de
bmw-service-raudzus.de
bmw-service-reith.de
bmw-service-riegel.de
bmw-service-rosenkranz.de
bmw-service-schmauser.de
bmw-service-schwarz.de
bmw-service-stahmer.de
bmw-service-tschirley.de
bmw-service-weiss.de
bmw-tief-doerfler.de
bmwserviceschmauser.de
fuchs.bmw
kellner-service.bmw
muhra.bmw
redirect-letsencrypt4.dealermaster-de.bmw
reier-berlin.de
reier-oranienburg.de
rhein.bmw
riedel.bmw
schmauser-service.bmw
seifert-service.bmw
weiss-bmw.de
www.bmw-schmid-elzach.de

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for redirect-letsencrypt4.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ntZMgZ2E1Cjla77j03X
bb2ygTveGJ+fhO+1fXgWN9olIulRXFt9NEjH3L29shaFcgagm0osi2EYUwD5ilCy
MSK2LGNfbjlvaZZewQEvjnZlBKjPb/9NVkpvetjNO7yEe55xLwCv6WrtfNXqcQEO
PTBGhjHQ/ZwSqpBzQzU4Csfe74ug8VDvv5LlVWRs7SOU3VFL+ch0zuadYyLbAArQ
gAHlsZyfd3GH8nLoEIzQJrr6zizTvjxcU9UyPlK2eJ+dLkk1WTq4/cEsP5/K63o5
z3J07Xpkw3zeiuDP50j5+OtMcdi2qBJBZ71QWBzL+k8WphxEaFm1puwF1uoZocD7
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 284851060150413456105582974367817208701713
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 17:25:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-20 17:25:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27075822635421452383621895249852405897326417597703673880346939833830072941884847939130923098117033419401909911802161291591819137147400956141586603790841919909139398786036939012172086000181518162345732154132131643172550497566490095210892738452696495342956874182659273398892937295213489839680833815625766918141386525832904476216572123446813278097269004923832801960548859473806268207837094370741263730799394398115927553071453522543934191676547905939960176774558804965493765896194495584076059908616725945185588863097174913771962890409337089926918534081569906166339073076695790696694015692450859346383045165734020075551517
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48ea150e4166b44e2d4664b8ec8366a1a38e864e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1459 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-auto-eichhorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-matthes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bundk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-emmerich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-fritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-hans-brandenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-heermann-rhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-kainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-m-suedwest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-motorrad-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-bodensee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-ludwigsburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-ah-erhardt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-auto-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-feil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-mm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohausskjellet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fetzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fritz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-grotewohlt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-guelke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-hannemann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-haupt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-isernhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-jungmayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-knopf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-langlinderer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-maier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-mueller-hollfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-neumeier-seidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-raudzus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-reith.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-riegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-rosenkranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schwarz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-stahmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-tschirley.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-tief-doerfler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwserviceschmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchs.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellner-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhra.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-oranienburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhein.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riedel.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmauser-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiss-bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018dc7c3b9250000040300463044022060cb5e351011f4453f7de54e8b5419fb6b5dae5c01fdf3f3346f2a57492d841702204a46041d13b80dcd05528570f0ffbbc6a442ab153d39628b9fe54f88ab929272007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dc7c3b947000004030046304402200b9640efe3d9c6918b84ac1e9c9964203d2df3da92598b46a26f5f30f70eb7de022006a233d4f5f622ca7cb16c4adf7729a9e9a121a997cab83c9bdf392ddcc9c89f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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