dev.wcmp.bmw

Issued by R3

About this certificate

This digital certificate with serial number 03:76:c1:5b:6c:9f:79:5d:44:57:15:56:1d:e7:13:c0:85:f7 was issued on by Let's Encrypt.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dev.wcmp.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:76:c1:5b:6c:9f:79:5d:44:57:15:56:1d:e7:13:c0:85:f7
Serial Number (int): 301747192797287169534499900618601979217399
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a9:be:40:d7:b5:ee:ba:54:38:c3:af:fe:47:76:28:65:76:e9:20:3c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b1:fc:c1:e8:31:57:4e:3a:96:1b:3c:a1:e7:02:93:df:7b:2d:0b:fa
Fingerprint (sha256): 56:bb:04:bd:66:2b:5b:db:41:e0:4d:e7:b2:30:f9:64:26:d7:39:5e:16:03:13:2a:86:bc:8f:7d:67:35:fa:32

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate dev.wcmp.bmw

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dev.wcmp.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

akamai.int.eshops.bmw.cloud
akamai.test.eshops.bmw.cloud
b2b-r1.prod.rrmc.eu-central-1.aws.bmw.cloud
b2d-r1.prod.rrmc.eu-central-1.aws.bmw.cloud
bmw-connected-e2e.api.bmw
bmw-connected-e2efsm.api.bmw
bmw-connected-int.api.bmw
bmw-connected-preview.api.bmw
bmw-connected-test.api.bmw
bmw-connected.api.bmw
cosystatic-int.bmwgroup.com
dev.wcmp.bmw
e2efsm.mybmw.com
epaas-int.bmw.com
gb-awsprod-r1.prod.rrmc.eu-central-1.aws.bmw.cloud
m156.bmw-int4.com
mini-connected-e2e.api.bmw
mini-connected-e2efsm.api.bmw
mini-connected-int.api.bmw
mini-connected-preview.api.bmw
mini-connected-test.api.bmw
mini-connected.api.bmw
needanalyzer-int1.api.bmw
one-int1.api.bmw
one-int2.api.bmw
pay-int.api.bmw
pay-preview.api.bmw
pay-test.api.bmw
pay.api.bmw
preview-gb.rollsroycemotorcars.com
processingwrapper-int.epaas.api.bmw
slwa-e2e.api.bmw
slwa.api.bmw
tracking-api-int1.api.bmw
tracking-api.bmw-int1.com
tracking-api.bmw-int10.com
tracking-api.bmw-int2.com
tracking-api.bmw-int3.com
tracking-api.bmw-int4.com
tracking-api.bmw-int5.com
tracking-api.bmw-int6.com
tracking-api.bmw-int8.com
tracking-api.bmw-int9.com
www-legacy.bmw-int4.com
www-legacy.m6.bmw.com
www.p101.mini.com
www.p11.mini.com
www.p19.mini.com
www.p2.bmw.com
www.p20.mini.com
www.p21.mini.com
www.p22.mini.com
www.p24.bmw.com
www.p26.bmw.com
www.p28.bmw.com
www.p37.mini.com
www.p38.mini.com
www.p40.bmw.com
www.p41.bmw.com
www.p42.bmw.com
www.p43.bmw.com
www.p44.bmw.com
www.p45.bmw.com
www.p46.bmw.com
www.p47.bmw.com
www.p50.bmw.com
www.p51.bmw.com
www.p54.mini.com
www.p56.mini.com
www.p58.bmw.com
www.p59.bmw.com
www.p64.mini.com
www.p72.mini.com
www.p73.mini.com
www.p80.mini.com
www.p92.bmw.com
www.p92.mini.com
www.p93.bmw.com
www.p93.mini.com
www.p94.mini.com
www.p99.bmw.com
www.perfectworld-amp.bmw-int1.com
www.perfectworld.bmw-int1.com
www.qa.bmwusa.com

Other certificates including the domain name wcmp.bmw

(limited to 100 certificates)
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
akamai-evaluation.wcmp.bmw
dev.wcmp.bmw
bmw-int1.com
microservices.api.bmw
bmw-int1.com
dev.wcmp.bmw
microservices.api.bmw
bmw-int1.com
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
dev.wcmp.bmw
dev.wcmp.bmw
bmw-int1.com
microservices.api.bmw
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
microservices.api.bmw
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
dev.wcmp.bmw
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
bmw-int1.com
bmw-int1.com
microservices.api.bmw
microservices.api.bmw
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
microservices.api.bmw
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
microservices.api.bmw
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
bmw-int1.com
dev.wcmp.bmw
dev.wcmp.bmw
bmw-int1.com
bmw-int1.com
microservices.api.bmw
bmw-int1.com
microservices.api.bmw
bmw-int1.com
dev.wcmp.bmw
bmw-int1.com
dev.wcmp.bmw
dev.wcmp.bmw
wcmp.bmw
bmw-int1.com
bmw-int1.com

Certificate

The complete raw certificate details for dev.wcmp.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn81e1nZ3ipm6bUJuJnVN
4hn1NIlnJep9NpwMUyhNZW6qOuPFRga5SLr/cU6cVYOuhcfqd4AXNih7AQILa08i
MOTnXlJOVty0PDx6npa1BsMx59sVEQl57MKm2cv5e7+DwQgr6p59V0SFKcV9wrqa
gMJd303Ckqup26a0rM7Zg9eSyIQQFnvs+Dd1VHvACY8Q70FqnSpTQrPScBXMSNIz
bs+RAxRhRmkpPfEdhjbJszcwWNBfrw9fB8Bve152rtuAznUCmyUAsCInL8Lj/DZd
NKGbDoidubxU2889OcpbxuWrSWU4OFIo3RSjuKhssHX9RPYS2+y9MIEePVznuB8Q
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 301747192797287169534499900618601979217399
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-17 10:05:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-15 10:05:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dev.wcmp.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20173162437857942101315401193960708816175080108299693822132586909966649539152902062559022427629993236809114179748834390574669468631253786538446465765129075240270650950359460971342037685207501003186467386740638240192895463966721002896586815690555259181943965754567113640212688362207124652759928762634355446973538074179508260553147242915185173405058644590906815363943665907678133113860875000556949879105816827869078390472198159973916633653812037742375708926870320236366309694814990837474883569622892916687914476930547237508408373924296493667623996893812606149696785022655497329002714908397354168662198813762569507901457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a9be40d7b5eeba5438c3affe4776286576e9203c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1912 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.int.eshops.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'akamai.test.eshops.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-r1.prod.rrmc.eu-central-1.aws.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2d-r1.prod.rrmc.eu-central-1.aws.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected-e2e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected-e2efsm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected-preview.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected-test.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-connected.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cosystatic-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wcmp.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2efsm.mybmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epaas-int.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gb-awsprod-r1.prod.rrmc.eu-central-1.aws.bmw.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm156.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected-e2e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected-e2efsm.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected-preview.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected-test.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mini-connected.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'needanalyzer-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'one-int2.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-int.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-preview.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay-test.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview-gb.rollsroycemotorcars.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'processingwrapper-int.epaas.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa-e2e.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slwa.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api-int1.api.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int10.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int5.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int8.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tracking-api.bmw-int9.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.m6.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p101.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p11.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p19.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p20.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p21.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p22.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p24.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p26.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p28.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p37.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p38.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p40.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p41.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p42.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p43.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p44.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p45.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p46.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p47.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p50.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p51.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p54.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p56.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p58.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p59.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p64.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p72.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p73.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p80.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p92.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p92.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p93.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p93.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p94.mini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.p99.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectworld-amp.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.perfectworld.bmw-int1.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa.bmwusa.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bdcf4f4b70000040300463044022036b1090c35f2cd2f5272900fa28a57bf06ec481defd8d9069b203b217b36864302205e8c9113ce419700b6061f4813d3494153a0843d580a9356ee21cc19d4167f5a007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bdcf4f4c50000040300473045022030b8c2c4865c50f8cfe1508f2999635339131299855564e1d9f2f36a2d5396d102210089be738fc63b5951dc54b5727fba746a0c2d4d8bb1ccf3a76bab73e3f3016ff4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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