tst.bmw-connecteddrive.com.au

- BMW AG -

Issued by TC TrustCenter Class 2 L1 CA XI

About this certificate

This digital certificate with serial number d6:cf:00:01:00:02:73:7c:f1:7e:3a:c3:9d:7a was issued on by TC TrustCenter GmbH.

With 27 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BMW AG

Organization: BMW AG
Organization unit: PKI Services
State / Province: Bayern
Locality: München
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): d6:cf:00:01:00:02:73:7c:f1:7e:3a:c3:9d:7a
Serial Number (int): 4356835886030881223501087894642042
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId: b6:7c:83:f6:c5:3e:2f:68:aa:05:83:62:ab:80:0c:f3:a2:8b:3a:27
AuthorityKeyId: 66:b3:c6:91:f9:b6:cd:b2:5f:9a:37:56:46:0c:e2:6b:d5:b1:7c:b4

Fingerprint (sha1): 73:72:a6:07:05:7f:e7:7c:fe:77:83:00:63:2f:4c:81:b1:c5:22:d7
Fingerprint (sha256): 41:cf:9e:ec:80:58:eb:cf:c8:4b:1d:88:cb:6f:ea:e2:98:72:e0:c9:4f:47:21:b5:64:c2:91:69:7c:b9:c9:df

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt

Revocation information

OCSP Server: http://ocsp.xi.tcclass2-ii.trustcenter.de
CRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl
CRL Distribution Point: ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?

Check the revocation status for certificate tst.bmw-connecteddrive.com.au

27

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tst.bmw-connecteddrive.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tst.bmw-connecteddrive.com.au
tst.bmw-assist-login.com
tst.bmw-connecteddrive.ae
tst.bmw-connecteddrive.com
tst.bmw-connecteddrive.com.br
tst.bmw-connecteddrive.com.kw
tst.bmw-connecteddrive.fi
tst.bmw-connecteddrive.ie
tst.bmw-connecteddrive.kr
tst.bmw-connecteddrive.my
tst.bmw-connecteddrive.no
tst.bmw-connecteddrive.tw
tst.bmw-i-connecteddrive.ae
tst.bmw-i-connecteddrive.com
tst.bmw-i-connecteddrive.com.au
tst.bmw-i-connecteddrive.com.br
tst.bmw-i-connecteddrive.fi
tst.bmw-i-connecteddrive.ie
tst.bmw-i-connecteddrive.kr
tst.bmw-i-connecteddrive.my
tst.bmw-i-connecteddrive.no
tst.bmw-i-connecteddrive.tw
tst.bmw-online.ae
tst.bmwconnecteddrive.com
tst.connected-drive.com
tst.connecteddrive.ae
tst.connecteddrive.com
[email protected]

Other certificates including the domain name bmw-connecteddrive.com.au

(limited to 100 certificates)
infonet3.bmwgroup.com
int.bmw-connecteddrive.ae
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
infonet3.bmwgroup.com
www.bmw-connecteddrive.ae
www.mini-connected.de
int.bmw-connecteddrive.ae
www.mini-connected.de
www.mini-connected.de
tst.bmw-connecteddrive.com.au
int.bmw-connecteddrive.ae
infonet3.bmwgroup.com
infonet3.bmwgroup.com
int.bmw-connecteddrive.ae
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
int.bmw-connecteddrive.com.au
infonet3.bmwgroup.com
www.bmw-connecteddrive.ae
www.bmw-connecteddrive.com.au
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com.au
www.bmw-connecteddrive.ae
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.ae
infonet3.bmwgroup.com
www.mini-connected.de
infonet3.bmwgroup.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.mini-connected.de
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
tst.bmw-connecteddrive.com.au
infonet3.bmwgroup.com
infonet3.bmwgroup.com
int.bmw-connecteddrive.ae

Certificate

The complete raw certificate details for tst.bmw-connecteddrive.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzML4Auve4utSUcW3as8r
6O0cvVf/NEGZrg3l6TZmETl54MAoQ4VFZACY/DYfNLGevyA257RB2dKFkECQx5qd
4Z8wMqX8tZahn0W/RHXosoqKc51Szy3nMn969khbQlyV0ifhBQsAg3fvpxsA3lLa
H5uGHa54F2mnQmZ7/MjSnXwGiPIbENmNsLXciulY3Kg3jLVAep2w5e3z2KoJYMAz
1oWx2WLmHcAWvH7ZfiNSr4bMmGlhG5rnhfxuzgRr5peOOrM0aizTy5cOHP/M19++
9GTWE9nug0NUfedu5F5xU3pcUVXjDeUYMHPE7mDjKtpuwrJII6C1mC5IAJz2+/4g
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4356835886030881223501087894642042
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-27 17:56:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-27 17:56:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tst.bmw-connecteddrive.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25848756908969010415838749959009675607754436196028724294952752458520942921129861901371857214391075425669694479324119769786215613126813910998590263341569163850875784980776370994956577466771393455415293161149781515577495698773312510282122442888816710850131888476670379146618293904471671872231961581650597875407652962122772823637956895997257930398886253017400554397845268554013648682019231054783328043417048634473601013392390918711786211761050708726987082703568688110271912492652117348790534560185501033669629598541250949876729570647907901139652740376063762548414400213072658000510162550580575896822205503334344969560301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.xi.tcclass2-ii.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3c691f9b6cdb25f9a3756460ce26bd5b17cb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b67c83f6c53e2f68aa058362ab800cf3a28b3a27
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (778 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-assist-login.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-online.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connected-drive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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