dealer.bmw-int4.com

- Bayerische Motoren Werke AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 67:fa:fe:5f:32:ba:0d:bf:c6:4a:cc:97:37:23:59:b6 was issued on by GeoTrust Inc..

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 67:fa:fe:5f:32:ba:0d:bf:c6:4a:cc:97:37:23:59:b6
Serial Number (int): 138213717054893983817520932843952495030
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): aa:15:42:30:50:89:db:87:9b:b1:0e:24:37:c1:dc:ed:88:09:23:b4
Fingerprint (sha256): 4a:78:52:20:55:79:c1:00:cd:56:88:5c:f4:d6:3d:bd:b0:4b:07:6a:44:de:4d:05:d9:ef:bb:23:d2:f8:24:42

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate dealer.bmw-int4.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dealer.bmw-int4.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bmw.ps
www.bmw.re
vision.next100.bmw
www.bmw-bahrain.com
www.bmw.dz
m.bmw.de
www.bmw-jordan.com
www.bmw-tahiti.com
www.bmw-antilles.fr
www-int.bmwbkk.de
www.bmw.ba
www.bmw.com.mk
www.bmw-yemen.com
www.m152.bmw-int1.com
www.m167.bmw-int1.com
www.m168.bmw-int1.com
www.m167.bmw-int3.com
static.bmw-int3.com
www.m168.bmw-int3.com
www.m152.bmw-int3.com
www.bmw-tunisia.com
www-int.chargenow.com
www.p58.bmw.com
www.p50.bmw.com
www.p152.bmw.com
legacy.bmw.com
some.bmw.com
www.p166.bmw.com
bmwi-some.bmw.com
www.p1.bmw.com
www.p57.bmw.com
www.p51.bmw.com
www.m49.bmw-int2.com
www.m30.bmw-int2.com
www.m40.bmw-int2.com
www.m3.bmw-int2.com
www.m152.bmw-int2.com
www.m23.bmw-int2.com
www.m31.bmw-int2.com
www.m2.bmw-int2.com
www.m11.bmw-int2.com
www.m10.bmw-int2.com
www.m19.bmw-int2.com
www.m35.bmw-int2.com
www.m41.bmw-int2.com
www.m59.bmw-int2.com
www.m54.bmw-int2.com
www.m47.bmw-int2.com
www.m42.bmw-int2.com
www.m8.bmw-int2.com
www.m7.bmw-int2.com
www.m18.bmw-int2.com
www.m26.bmw-int2.com
www.m33.bmw-int2.com
www.m12.bmw-int2.com
www.m13.bmw-int2.com
www.m21.bmw-int2.com
www.m6.bmw-int2.com
www.m52.bmw-int2.com
www.m55.bmw-int2.com
www.m50.bmw-int2.com
www.m37.bmw-int2.com
www.m16.bmw-int2.com
www.m56.bmw-int2.com
www.m34.bmw-int2.com
www.m58.bmw-int2.com
www.m25.bmw-int2.com
www.m53.bmw-int2.com
www.m48.bmw-int2.com
www.m36.bmw-int2.com
www.m51.bmw-int2.com
www.m1.bmw-int2.com
www.m15.bmw-int2.com
www.m32.bmw-int2.com
www.m22.bmw-int2.com
www.m5.bmw-int2.com
www.m17.bmw-int2.com
www.m28.bmw-int2.com
www.m9.bmw-int2.com
www.m44.bmw-int2.com
www.m27.bmw-int2.com
www.m45.bmw-int2.com
www.m39.bmw-int2.com
www.m20.bmw-int2.com
www.m14.bmw-int2.com
www.m43.bmw-int2.com
www.m38.bmw-int2.com
www.m46.bmw-int2.com
www.m29.bmw-int2.com
www.m60.bmw-int2.com
www.m57.bmw-int2.com
www.m152.bmw-int4.com
dealer.bmw-int4.com

Other certificates including the domain name bmw-int4.com

(limited to 100 certificates)
www-origin-s2.bmw-int4.com
con.api.mini
bmw-int1.com
www-origin.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
dealer.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
www.m61.bmw-int4.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
dealer.bmw-int4.com
bmw-int1.com
con.api.mini
bmw-int1.com
core.bmw-int4.com
con.api.mini
bmw-int1.com
bmw-int1.com
core.bmw-int4.com
www.bmw.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
www.bmw.com
bmw-int1.com
www.bmw.com
dealer.bmw-int4.com
www.bmw.com
bmw-int1.com
bmw-int1.com
www.bmw.at
www.bmw.com
core.bmw-int4.com
www.bmw.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
www.bmwlat.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw.com
www.bmw.at
www.bmw.at
dealer.bmw-int4.com
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
con.api.mini
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dealer.bmw-int4.com
con.api.mini
con.api.mini
bmw-int1.com
con.api.mini
dev.wcmp.bmw
con.api.mini
bmw-int1.com
con.api.mini
www.bmw.com
www.bmw.at
bmw-int1.com
www.bmwlat.com
www.bmwlat.com
www.bmw.at
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
dealer.bmw-int4.com
www.bmw-int4.com
www.bmw.at
www.bmw.at
www.m61.bmw-int4.com
www.bmw.de
dealer.bmw-int4.com
www-origin-s2.bmw-int4.com
www.bmw.at
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
con.api.mini
www.bmwlat.com
con.api.mini
bmw-int1.com
www.bmw-int4.com
bmw-int1.com
www.m1.bmw-int7.com
con.api.mini
con.api.mini
www.m1.bmw-int7.com

Certificate

The complete raw certificate details for dealer.bmw-int4.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINZDCCDEygAwIBAgIQZ/r+XzK6Db/GSsyXNyNZtjANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcxMDE4MDAwMDAwWhcNMTgxMTAyMjM1
OTU5WjB0MQswCQYDVQQGEwJERTEQMA4GA1UECAwHQmF2YXJpYTEPMA0GA1UEBwwG
TXVuaWNoMSQwIgYDVQQKDBtCYXllcmlzY2hlIE1vdG9yZW4gV2Vya2UgQUcxHDAa
BgNVBAMME2RlYWxlci5ibXctaW50NC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDPW8Dd4cssmSOIO5XKB/hS7AVdSoXleK2PTMysyg597pNwfxKG
soyWqjLS1f1wKaMOX7QghO6eMqVTOXe/8P1ms/WK+CDSt0KFDvUUclkd5+LupUpN
P1ZzOZsDgc8VhQjyGgqOcCZ+imqckHKL83/pOcL5VLKnk/WOa83ay3DzTn2Vc9zb
woSNl0idljKbIoiSVzk8ctgKZOPEOBR190Ss8BqoAxWweULC4OOyqBmcKfAdC4ub
VSc0djr9c36wj7kepYK/J/7stVbx5+0NAJPkoiko84PJZCwcg9iDA7mt3rtrtCUY
yQUM6ILmXJKUDkCwXs+hWxCmK+oOL3Z0f7FFAgMBAAGjggogMIIKHDCCB44GA1Ud
EQSCB4UwggeBggp3d3cuYm13LnBzggp3d3cuYm13LnJlghJ2aXNpb24ubmV4dDEw
MC5ibXeCE3d3dy5ibXctYmFocmFpbi5jb22CCnd3dy5ibXcuZHqCCG0uYm13LmRl
ghJ3d3cuYm13LWpvcmRhbi5jb22CEnd3dy5ibXctdGFoaXRpLmNvbYITd3d3LmJt
dy1hbnRpbGxlcy5mcoIRd3d3LWludC5ibXdia2suZGWCCnd3dy5ibXcuYmGCDnd3
dy5ibXcuY29tLm1rghF3d3cuYm13LXllbWVuLmNvbYIVd3d3Lm0xNTIuYm13LWlu
dDEuY29tghV3d3cubTE2Ny5ibXctaW50MS5jb22CFXd3dy5tMTY4LmJtdy1pbnQx
LmNvbYIVd3d3Lm0xNjcuYm13LWludDMuY29tghNzdGF0aWMuYm13LWludDMuY29t
ghV3d3cubTE2OC5ibXctaW50My5jb22CFXd3dy5tMTUyLmJtdy1pbnQzLmNvbYIT
d3d3LmJtdy10dW5pc2lhLmNvbYIVd3d3LWludC5jaGFyZ2Vub3cuY29tgg93d3cu
cDU4LmJtdy5jb22CD3d3dy5wNTAuYm13LmNvbYIQd3d3LnAxNTIuYm13LmNvbYIO
bGVnYWN5LmJtdy5jb22CDHNvbWUuYm13LmNvbYIQd3d3LnAxNjYuYm13LmNvbYIR
Ym13aS1zb21lLmJtdy5jb22CDnd3dy5wMS5ibXcuY29tgg93d3cucDU3LmJtdy5j
b22CD3d3dy5wNTEuYm13LmNvbYIUd3d3Lm00OS5ibXctaW50Mi5jb22CFHd3dy5t
MzAuYm13LWludDIuY29tghR3d3cubTQwLmJtdy1pbnQyLmNvbYITd3d3Lm0zLmJt
dy1pbnQyLmNvbYIVd3d3Lm0xNTIuYm13LWludDIuY29tghR3d3cubTIzLmJtdy1p
bnQyLmNvbYIUd3d3Lm0zMS5ibXctaW50Mi5jb22CE3d3dy5tMi5ibXctaW50Mi5j
b22CFHd3dy5tMTEuYm13LWludDIuY29tghR3d3cubTEwLmJtdy1pbnQyLmNvbYIU
d3d3Lm0xOS5ibXctaW50Mi5jb22CFHd3dy5tMzUuYm13LWludDIuY29tghR3d3cu
bTQxLmJtdy1pbnQyLmNvbYIUd3d3Lm01OS5ibXctaW50Mi5jb22CFHd3dy5tNTQu
Ym13LWludDIuY29tghR3d3cubTQ3LmJtdy1pbnQyLmNvbYIUd3d3Lm00Mi5ibXct
aW50Mi5jb22CE3d3dy5tOC5ibXctaW50Mi5jb22CE3d3dy5tNy5ibXctaW50Mi5j
b22CFHd3dy5tMTguYm13LWludDIuY29tghR3d3cubTI2LmJtdy1pbnQyLmNvbYIU
d3d3Lm0zMy5ibXctaW50Mi5jb22CFHd3dy5tMTIuYm13LWludDIuY29tghR3d3cu
bTEzLmJtdy1pbnQyLmNvbYIUd3d3Lm0yMS5ibXctaW50Mi5jb22CE3d3dy5tNi5i
bXctaW50Mi5jb22CFHd3dy5tNTIuYm13LWludDIuY29tghR3d3cubTU1LmJtdy1p
bnQyLmNvbYIUd3d3Lm01MC5ibXctaW50Mi5jb22CFHd3dy5tMzcuYm13LWludDIu
Y29tghR3d3cubTE2LmJtdy1pbnQyLmNvbYIUd3d3Lm01Ni5ibXctaW50Mi5jb22C
FHd3dy5tMzQuYm13LWludDIuY29tghR3d3cubTU4LmJtdy1pbnQyLmNvbYIUd3d3
Lm0yNS5ibXctaW50Mi5jb22CFHd3dy5tNTMuYm13LWludDIuY29tghR3d3cubTQ4
LmJtdy1pbnQyLmNvbYIUd3d3Lm0zNi5ibXctaW50Mi5jb22CFHd3dy5tNTEuYm13
LWludDIuY29tghN3d3cubTEuYm13LWludDIuY29tghR3d3cubTE1LmJtdy1pbnQy
LmNvbYIUd3d3Lm0zMi5ibXctaW50Mi5jb22CFHd3dy5tMjIuYm13LWludDIuY29t
ghN3d3cubTUuYm13LWludDIuY29tghR3d3cubTE3LmJtdy1pbnQyLmNvbYIUd3d3
Lm0yOC5ibXctaW50Mi5jb22CE3d3dy5tOS5ibXctaW50Mi5jb22CFHd3dy5tNDQu
Ym13LWludDIuY29tghR3d3cubTI3LmJtdy1pbnQyLmNvbYIUd3d3Lm00NS5ibXct
aW50Mi5jb22CFHd3dy5tMzkuYm13LWludDIuY29tghR3d3cubTIwLmJtdy1pbnQy
LmNvbYIUd3d3Lm0xNC5ibXctaW50Mi5jb22CFHd3dy5tNDMuYm13LWludDIuY29t
ghR3d3cubTM4LmJtdy1pbnQyLmNvbYIUd3d3Lm00Ni5ibXctaW50Mi5jb22CFHd3
dy5tMjkuYm13LWludDIuY29tghR3d3cubTYwLmJtdy1pbnQyLmNvbYIUd3d3Lm01
Ny5ibXctaW50Mi5jb22CFXd3dy5tMTUyLmJtdy1pbnQ0LmNvbYITZGVhbGVyLmJt
dy1pbnQ0LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAi
MCCgHqAchhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGS
MIGPBgZngQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0
LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNo
dHRwczovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVn
YWwwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv
95b0hT9yPDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYT
aHR0cDovL2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNi
LmNvbS9nbi5jcnQwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdwDd6x0reg1PpiCL
ga2BaHB+Lo6dAdVciI09EcTNtuy+zAAAAV8v5G6oAAAEAwBIMEYCIQDH15nlj2Zi
cSmstbjBetoLpwuQ9tyPnmzZ4LTAAu+IQAIhALJ1gabbdc0TLY/Zb3IRLOkYyTOF
yofCsIyyrBbLmHHdAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFfL+RvuQAABAMARzBFAiBuPcZcwbv4ZFMTRkgtR5YRz1/V9XzuPyBcYHR6apXB
zwIhAOq+XgjxuWAT2SVUUyeS1tMXmQebiTBPYZthtBh2jP25MA0GCSqGSIb3DQEB
CwUAA4IBAQA8WVu7EVBgYQev+SwPLbQmsbrRE/Zt5fZsyJHTJbO/pYNzlT3GotRI
Ncyxi3pUOwOgDNb4P7MawAGhvN/rbaW+4q/LT4xiAc/Jesn4uad1xSuQfDnLLWuU
tGl2n7mxFVkqH8Wefkd2pw7Xn4f0jm6V/ZEUWPngIIoVxZ31VHWjpunZzWRr/06a
5pThFjUii8z3QL6hDb+DFkYxZExzK8iCWEH//zpRvM+reEl6IfPtwlliqFjd4Npz
h1LYk9K0Xty6bgyAAY8p9/XJ6HKMG95g1uGCsxP1OoQdnK0PY0hxd3sU4jjadPWk
SNLyaCspU+LzZ74ICEcmISmEwxZvr1+Q
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1vA3eHLLJkjiDuVygf4
UuwFXUqF5Xitj0zMrMoOfe6TcH8ShrKMlqoy0tX9cCmjDl+0IITunjKlUzl3v/D9
ZrP1ivgg0rdChQ71FHJZHefi7qVKTT9WczmbA4HPFYUI8hoKjnAmfopqnJByi/N/
6TnC+VSyp5P1jmvN2stw8059lXPc28KEjZdInZYymyKIklc5PHLYCmTjxDgUdfdE
rPAaqAMVsHlCwuDjsqgZnCnwHQuLm1UnNHY6/XN+sI+5HqWCvyf+7LVW8eftDQCT
5KIpKPODyWQsHIPYgwO5rd67a7QlGMkFDOiC5lySlA5AsF7PoVsQpivqDi92dH+x
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 138213717054893983817520932843952495030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'dealer.bmw-int4.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26176574408753219295399402421987517869193693230942559770108545053269712722354694338224199363785362211155560657664626753727013478482871896662959865196992160290838257112277450668024550158783199068349402238843195312477217070587937169657210380581425879222368470021814863845926485206440078462532198147415691526461704562150971632678784381807762919963281914398756236493012288587109418063207433950730206892371759481225086094711550972549199727238593843723036445108658770658566609881962487147879066476736322692727985010954371560711921621813067014914945488975527993796115623569788150760212146985458677709398372720560436309635397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1925 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vision.next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-bahrain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jordan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tahiti.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-antilles.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.ba'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.com.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-yemen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m167.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m168.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m167.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m168.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-tunisia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-int.chargenow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p58.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p50.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p152.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p166.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwi-some.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p1.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p57.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p51.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m49.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m30.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m40.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m3.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m23.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m31.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m2.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m11.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m10.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m19.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m35.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m41.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m59.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m54.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m47.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m42.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m8.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m7.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m18.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m26.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m33.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m12.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m13.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m21.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m6.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m52.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m55.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m50.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m37.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m16.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m56.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m34.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m58.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m25.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m53.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m48.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m36.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m51.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m1.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m15.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m32.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m22.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m5.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m17.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m28.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m9.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m44.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m27.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m45.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m39.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m20.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m14.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m43.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m38.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m46.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m29.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m60.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m57.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m152.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealer.bmw-int4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f2fe46ea80000040300483046022100c7d799e58f66627129acb5b8c17ada0ba70b90f6dc8f9e6cd9e0b4c002ef8840022100b27581a6db75cd132d8fd96f72112ce918c93385ca87c2b08cb2ac16cb9871dd007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f2fe46fb9000004030047304502206e3dc65cc1bbf864531346482d479611cf5fd5f57cee3f205c60747a6a95c1cf022100eabe5e08f1b96013d92554532792d6d31799079b89304f619b61b418768cfdb9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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