tst.bmw-connecteddrive.at

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1b:16:fe:df:2c:1f:8b:72:29:d2:30:34 was issued on by GlobalSign nv-sa.

With 38 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:16:fe:df:2c:1f:8b:72:29:d2:30:34
Serial Number (int): 8383895231097829208917946420
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 40:f8:45:5a:9a:71:1d:28:0a:60:43:87:9f:b8:84:be:00:d2:76:de
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 21:2d:83:50:21:54:2a:70:62:f3:53:e4:c1:52:84:8f:8a:32:f9:09
Fingerprint (sha256): 87:4c:b4:69:ad:01:e9:94:63:93:09:42:c4:ec:c7:d9:e4:47:3d:b1:74:3c:b8:b8:d5:06:67:c8:72:51:b5:35

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate tst.bmw-connecteddrive.at

38

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tst.bmw-connecteddrive.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tst.bmw-connecteddrive.at
tst.bmw-assist-portal.de
tst.bmw-assist-portal.it
tst.bmw-connected-drive.fr
tst.bmw-connecteddrive.be
tst.bmw-connecteddrive.ch
tst.bmw-connecteddrive.co.uk
tst.bmw-connecteddrive.com.fr
tst.bmw-connecteddrive.de
tst.bmw-connecteddrive.dk
tst.bmw-connecteddrive.es
tst.bmw-connecteddrive.fr
tst.bmw-connecteddrive.it
tst.bmw-connecteddrive.nl
tst.bmw-i-connecteddrive.at
tst.bmw-i-connecteddrive.be
tst.bmw-i-connecteddrive.ch
tst.bmw-i-connecteddrive.co.uk
tst.bmw-i-connecteddrive.de
tst.bmw-i-connecteddrive.dk
tst.bmw-i-connecteddrive.es
tst.bmw-i-connecteddrive.fr
tst.bmw-i-connecteddrive.it
tst.bmw-i-connecteddrive.nl
tst.bmw-online-portal.de
tst.bmw-online-portal.it
tst.bmw-online-portal.nl
tst.bmw-online.co.uk
tst.bmwconnecteddrive.at
tst.bmwconnecteddrive.com.fr
tst.bmwconnecteddrive.de
tst.bmwconnecteddrive.fr
tst.bmwconnecteddrive.it
tst.connecteddrive.at
tst.connecteddrive.com.fr
tst.connecteddrive.de
tst.connecteddrive.fr
tst.connecteddrive.it

Other certificates including the domain name bmw-connecteddrive.at

(limited to 100 certificates)
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
infonet3.bmwgroup.com
tst.bmw-connecteddrive.at
infonet3.bmwgroup.com
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
www.bmw-connecteddrive.at
www.bmw-connecteddrive.com
tst.bmw-connecteddrive.at
int.bmw-connecteddrive.at
www.bmw-connecteddrive.ie
int.bmw-connecteddrive.at
int.bmw-connecteddrive.at
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
tst.bmw-connecteddrive.at
www.mini-connected.de
int.bmw-connecteddrive.at
tst.bmw-connecteddrive.at
www.mini-connected.de
tst.bmw-connecteddrive.at
www.mini-connected.de
www.bmw-connecteddrive.ie
www.bmw-connecteddrive.at
int.bmw-connecteddrive.at
int.bmw-connecteddrive.at
www.bmw-connecteddrive.ie
int.bmw-connecteddrive.at
infonet3.bmwgroup.com
infonet3.bmwgroup.com
tst.bmw-connecteddrive.at
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.ie
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
tst.bmw-connecteddrive.at
www.bmw-connecteddrive.ie
www.bmw-connecteddrive.at
infonet3.bmwgroup.com
www.bmw-connecteddrive.ie
fupo-poc.bmw-connecteddrive.com
int.bmw-connecteddrive.at
www.bmw-connecteddrive.com
tst.bmw-connecteddrive.at
www.bmw-connecteddrive.ie
int.bmw-connecteddrive.at
int.bmw-connecteddrive.at
infonet3.bmwgroup.com
infonet3.bmwgroup.com
tst.bmw-connecteddrive.at
www.bmw-connecteddrive.at
www.mini-connected.de
www.bmw-connecteddrive.ie
infonet3.bmwgroup.com
www.bmw-connecteddrive.com
tst.bmw-connecteddrive.at
infonet3.bmwgroup.com
www.mini-connected.de
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
int.bmw-connecteddrive.at
tst.bmw-connecteddrive.at
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.at
tst.bmw-connecteddrive.at

Certificate

The complete raw certificate details for tst.bmw-connecteddrive.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJJjCCCA6gAwIBAgIMGxb+3ywfi3Ip0jA0MA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMDAzMTkxNzM0NTFaFw0y
MTAzMjAxNzM0NTFaMHoxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdCYXZhcmlhMQ8w
DQYDVQQHEwZNdW5pY2gxJDAiBgNVBAoTG0JheWVyaXNjaGUgTW90b3JlbiBXZXJr
ZSBBRzEiMCAGA1UEAxMZdHN0LmJtdy1jb25uZWN0ZWRkcml2ZS5hdDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAKlcwMk0oTKSx0vn9PsjACC0TeKppzMX
gOyd3cmX5igYtIcVwCojjx2r9JFOBbjNhLpTebE+fRAWeqoCawDgO4ffwC91NIRv
ScDUSmVFrfh+eFm9OBBQrLFQmrsWsctMz2ItGBJKCFlEHe3Jlh/dUDyrS+VZF3+m
Jctceq0vmiOHaax9OZumAluW2NrC2Q9HMP8dSiZVTlhJeFQzod4JfB/K2zi0KAui
ClJPyUK68bytqr/Vg8Nz2FEbZAaIDSw1N13xupnfxBynjqdsZHY9ide2iw4mWWIP
DfnbbLJoKV3PbZM/Zi9J17asLVgGubNtuNflQ4D0xMMbgM6oVSau9gcCAwEAAaOC
BdQwggXQMA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEF
BQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2Fv
dnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNp
Z24uY29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQw
NDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3Np
dG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwPwYDVR0fBDgwNjA0oDKgMIYuaHR0
cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDCCBBMG
A1UdEQSCBAowggQGghl0c3QuYm13LWNvbm5lY3RlZGRyaXZlLmF0ghh0c3QuYm13
LWFzc2lzdC1wb3J0YWwuZGWCGHRzdC5ibXctYXNzaXN0LXBvcnRhbC5pdIIadHN0
LmJtdy1jb25uZWN0ZWQtZHJpdmUuZnKCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUu
YmWCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUuY2iCHHRzdC5ibXctY29ubmVjdGVk
ZHJpdmUuY28udWuCHXRzdC5ibXctY29ubmVjdGVkZHJpdmUuY29tLmZyghl0c3Qu
Ym13LWNvbm5lY3RlZGRyaXZlLmRlghl0c3QuYm13LWNvbm5lY3RlZGRyaXZlLmRr
ghl0c3QuYm13LWNvbm5lY3RlZGRyaXZlLmVzghl0c3QuYm13LWNvbm5lY3RlZGRy
aXZlLmZyghl0c3QuYm13LWNvbm5lY3RlZGRyaXZlLml0ghl0c3QuYm13LWNvbm5l
Y3RlZGRyaXZlLm5sght0c3QuYm13LWktY29ubmVjdGVkZHJpdmUuYXSCG3RzdC5i
bXctaS1jb25uZWN0ZWRkcml2ZS5iZYIbdHN0LmJtdy1pLWNvbm5lY3RlZGRyaXZl
LmNogh50c3QuYm13LWktY29ubmVjdGVkZHJpdmUuY28udWuCG3RzdC5ibXctaS1j
b25uZWN0ZWRkcml2ZS5kZYIbdHN0LmJtdy1pLWNvbm5lY3RlZGRyaXZlLmRrght0
c3QuYm13LWktY29ubmVjdGVkZHJpdmUuZXOCG3RzdC5ibXctaS1jb25uZWN0ZWRk
cml2ZS5mcoIbdHN0LmJtdy1pLWNvbm5lY3RlZGRyaXZlLml0ght0c3QuYm13LWkt
Y29ubmVjdGVkZHJpdmUubmyCGHRzdC5ibXctb25saW5lLXBvcnRhbC5kZYIYdHN0
LmJtdy1vbmxpbmUtcG9ydGFsLml0ghh0c3QuYm13LW9ubGluZS1wb3J0YWwubmyC
FHRzdC5ibXctb25saW5lLmNvLnVrghh0c3QuYm13Y29ubmVjdGVkZHJpdmUuYXSC
HHRzdC5ibXdjb25uZWN0ZWRkcml2ZS5jb20uZnKCGHRzdC5ibXdjb25uZWN0ZWRk
cml2ZS5kZYIYdHN0LmJtd2Nvbm5lY3RlZGRyaXZlLmZyghh0c3QuYm13Y29ubmVj
dGVkZHJpdmUuaXSCFXRzdC5jb25uZWN0ZWRkcml2ZS5hdIIZdHN0LmNvbm5lY3Rl
ZGRyaXZlLmNvbS5mcoIVdHN0LmNvbm5lY3RlZGRyaXZlLmRlghV0c3QuY29ubmVj
dGVkZHJpdmUuZnKCFXRzdC5jb25uZWN0ZWRkcml2ZS5pdDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMC
s+swHQYDVR0OBBYEFED4RVqacR0oCmBDh5+4hL4A0nbeMBMGCisGAQQB1nkCBAMB
Af8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCe/lQNDW5SG9Ul8Tdar/sO4k9KEnjS
+Os9VPtf35E1EvXFW6sAwPBoVy6avbmKq+rKNQ+ayyU6Jtkrun10fPQEXTGllNHZ
nRzBoWy4celfP++Pn+1JFwVJ5uMmT7BUuSYI6gmKXuqYqOkSJnA47tSrZRYi6uWl
RhujI6m0vMFJEg8jOMk8MbNBtlUsXjU1j53By4X6SDvfswPwjnShqiyOd7etcPbu
2g03NbqLOpKarTh5I2ND5iVzWIqP+c2nMbbk8dtY+zF0O0/iICpiEVCDziXQFpA9
s+34PVJVVat8UFKqGP5WynGvYlFz+UrwqexMbWnEJY1USwmC73hqpCYG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVzAyTShMpLHS+f0+yMA
ILRN4qmnMxeA7J3dyZfmKBi0hxXAKiOPHav0kU4FuM2EulN5sT59EBZ6qgJrAOA7
h9/AL3U0hG9JwNRKZUWt+H54Wb04EFCssVCauxaxy0zPYi0YEkoIWUQd7cmWH91Q
PKtL5VkXf6Yly1x6rS+aI4dprH05m6YCW5bY2sLZD0cw/x1KJlVOWEl4VDOh3gl8
H8rbOLQoC6IKUk/JQrrxvK2qv9WDw3PYURtkBogNLDU3XfG6md/EHKeOp2xkdj2J
17aLDiZZYg8N+dtssmgpXc9tkz9mL0nXtqwtWAa5s2241+VDgPTEwxuAzqhVJq72
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8383895231097829208917946420
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-19 17:34:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-20 17:34:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tst.bmw-connecteddrive.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21380011782844318132343576467623786376768552612637760732761640965249273414221543237721883606646666571415442956659950544433073798831660365291691302686000926682902649239302550320986561374490125327534756330303478818562546459486156011229897246415756361903893867364945038605819955399051551140464420179768111358311841576495847030112994475274700949916530081848949173785985740086592359751026992812161254270535682268546934856484907143346069242852582940429968066619300057735047910086905224385947951001676555465058395928818551385753687071429220248436656853488178875717462197226541304603326752686774806847532377250226363954034183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1034 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-assist-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-assist-portal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connected-drive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-online-portal.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-online-portal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-online-portal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-online.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.com.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmwconnecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.com.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.connecteddrive.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40f8455a9a711d280a6043879fb884be00d276de
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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