dealer.bmw-int4.com

- Bayerische Motoren Werke AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 4e:65:de:e2:a4:12:56:87:57:35:72:a3:84:bf:c2:68 was issued on by GeoTrust Inc..

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:65:de:e2:a4:12:56:87:57:35:72:a3:84:bf:c2:68
Serial Number (int): 104208726305209905467118629499820819048
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): d3:e8:84:5b:64:89:9f:46:51:ff:fc:aa:f0:f7:f8:4c:a9:65:07:a8
Fingerprint (sha256): 31:0c:a9:9e:f1:f1:05:e6:26:61:e3:c0:a9:69:08:9f:92:f9:2d:fe:e6:22:dd:75:a8:06:c2:f5:0d:24:2a:f4

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate dealer.bmw-int4.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealer.bmw-int4.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bmw.dz
www.bmw.ps
www.bmw.ba
www.bmw-tahiti.com
www.bmw-tunisia.com
www.bmw-bahrain.com
www.bmw-antilles.fr
www.bmw-jordan.com
www-int.bmwbkk.de
www.bmw.re
www.bmw-yemen.com
www.m167.bmw-int3.com
www.m152.bmw-int3.com
static.bmw-int3.com
www.m168.bmw-int3.com
www.m167.bmw-int1.com
www.m152.bmw-int1.com
www.m168.bmw-int1.com
www-int.chargenow.com
vision.next100.bmw
m.bmw.de
www.p50.bmw.com
www.p166.bmw.com
legacy.bmw.com
www.p54.bmw.com
www.p51.bmw.com
some.bmw.com
www.p52.bmw.com
www.p56.bmw.com
bmwi-some.bmw.com
www.p1.bmw.com
www.p152.bmw.com
www.p55.bmw.com
www.p58.bmw.com
www.p57.bmw.com
www.bmw.com.mk
www.m20.bmw-int2.com
www.m41.bmw-int2.com
www.m12.bmw-int2.com
www.m22.bmw-int2.com
www.m32.bmw-int2.com
www.m18.bmw-int2.com
www.m54.bmw-int2.com
www.m56.bmw-int2.com
www.m13.bmw-int2.com
www.m25.bmw-int2.com
www.m9.bmw-int2.com
www.m36.bmw-int2.com
www.m46.bmw-int2.com
www.m51.bmw-int2.com
www.m28.bmw-int2.com
www.m35.bmw-int2.com
www.m23.bmw-int2.com
www.m50.bmw-int2.com
www.m58.bmw-int2.com
www.m5.bmw-int2.com
www.m3.bmw-int2.com
www.m39.bmw-int2.com
www.m30.bmw-int2.com
www.m44.bmw-int2.com
www.m26.bmw-int2.com
www.m31.bmw-int2.com
www.m16.bmw-int2.com
www.m40.bmw-int2.com
www.m52.bmw-int2.com
www.m27.bmw-int2.com
www.m11.bmw-int2.com
www.m43.bmw-int2.com
www.m2.bmw-int2.com
www.m152.bmw-int2.com
www.m57.bmw-int2.com
www.m7.bmw-int2.com
www.m6.bmw-int2.com
www.m48.bmw-int2.com
www.m45.bmw-int2.com
www.m60.bmw-int2.com
www.m34.bmw-int2.com
www.m21.bmw-int2.com
www.m19.bmw-int2.com
www.m33.bmw-int2.com
www.m1.bmw-int2.com
www.m38.bmw-int2.com
www.m53.bmw-int2.com
www.m4.bmw-int2.com
www.m55.bmw-int2.com
www.m24.bmw-int2.com
www.m29.bmw-int2.com
www.m15.bmw-int2.com
www.m14.bmw-int2.com
www.m42.bmw-int2.com
www.m49.bmw-int2.com
www.m37.bmw-int2.com
www.m59.bmw-int2.com
www.m47.bmw-int2.com
www.m10.bmw-int2.com
www.m8.bmw-int2.com
www.m17.bmw-int2.com
www.m152.bmw-int4.com
dealer.bmw-int4.com

Other certificates including the domain name bmw-int4.com

(limited to 100 certificates)
www-origin-s2.bmw-int4.com
con.api.mini
bmw-int1.com
www-origin.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
dealer.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
www.m61.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
dealer.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
core.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
core.bmw-int4.com
www.bmw.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
www.bmw.com
bmw-int1.com
www.bmw.com
dealer.bmw-int4.com
www.bmw.com
bmw-int1.com
bmw-int1.com
www.bmw.at
www.bmw.com
core.bmw-int4.com
www.bmw.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
www.bmwlat.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw.com
www.bmw.at
www.bmw.at
dealer.bmw-int4.com
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
con.api.mini
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dealer.bmw-int4.com
con.api.mini
con.api.mini
bmw-int1.com
con.api.mini
dev.wcmp.bmw
con.api.mini
bmw-int1.com
con.api.mini
www.bmw.com
www.bmw.at
bmw-int1.com
www.bmwlat.com
www.bmwlat.com
www.bmw.at
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw-int4.com
www.bmw.at
www.bmw.at
www.m61.bmw-int4.com
www.bmw.de
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmwlat.com
con.api.mini
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
www.m1.bmw-int7.com
con.api.mini
con.api.mini
www.m1.bmw-int7.com

Certificate

The complete raw certificate details for dealer.bmw-int4.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo0sT9LqaSAX6UAFctjr
HcqxmEZ/bY7wjngBnlZlj8WVh90wWLqMRvPQAnrIEHp+ZtnZJOEoQA1UGhmySX+k
/FqhFouj0egorN1hR3MIKCNtqAdtOQ9uo7D6gJrkUf2oYOonlEILVTirg9SF03ec
QQkdUySJoDsz4tQ2/vnvahrl9YerMBim1MrBqtooMnF/AlLbloLfsEDyduEq7djJ
PmMp+kxLZPPhzpeYK/YoBBkDDZZDrMX8Yf1QldtnUUy++Jzyqqc9cF4+ZZW/Ocrk
ANCph34RSFXlUpVdne5SA6xei6wAs49/qUqttdQufcedbqX7B+R6BlUAWnn48YLe
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104208726305209905467118629499820819048
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dealer.bmw-int4.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26074705869762535549754366247954743456340743888535784566031495205007366194364804531749292630215017814660524614177170487305528126351426055586604833869806135892218919189999706885937765159714898123049027008338023208711711991601732185853757740650738972112130428297282325439148253775022069003510976490487280001821016652987858488865267793797620830463207446979812268956859130503365186626340120684498924385302320643586780468256301846687726298910018041120794442605633894222756186500083398839864764985203461802712184208900752330002891021210182990186339040091253920973723042902354523913219467959570107447145423404420110655610593
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2036 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m167.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m168.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m167.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m168.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.chargenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p50.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p166.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p54.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p51.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p52.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p56.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwi-some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p1.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p152.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p55.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p58.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p57.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m20.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m41.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m12.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m22.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m32.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m18.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m54.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m56.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m13.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m25.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m9.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m36.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m46.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m51.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m28.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m35.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m23.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m50.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m58.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m5.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m3.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m39.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m30.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m44.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m26.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m31.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m16.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m40.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m52.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m27.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m11.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m43.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m2.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m57.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m7.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m6.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m48.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m45.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m60.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m34.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m21.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m19.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m33.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m38.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m53.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m4.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m55.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m24.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m29.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m15.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m14.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m42.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m49.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m37.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m59.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m47.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m10.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m8.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m17.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw-int4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f063a5c8900000403004830460221008d7fa2555f072ca7beeca36a46cfe19e9d22374a4c95dee0a483b1f863b92b8c022100d7cd9d529a1431c7f9a6ed4c6b70cfdb24aec8eeb07342e2397b15c1e2a67f7b007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f063a5cc40000040300473045022100c4a397ed6bd3a1868f2f4255477fce0100b86f58c719bc7afcc805474a046cc3022037408c5b2c6b4fae3c244536754970518d80f738d5b8cbf135f85a47fc44b585
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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