infonet3.bmwgroup.com

- Bayerische Motoren Werke AG -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 22:2a:ce:36:cd:1f:21:dd:88:c6:af:f7:a7:bd:00:85 was issued on by GeoTrust Inc..

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
Organization unit: Akamai SAN SSL OV
State / Province: Bavaria
Locality: Munich
Country: DE

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 22:2a:ce:36:cd:1f:21:dd:88:c6:af:f7:a7:bd:00:85
Serial Number (int): 45416010842926794091973209974349037701
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a4:fd:0c:14:18:a8:2e:03:76:dd:99:36:00:8a:62:0d:f4:94:bb:42
Fingerprint (sha256): 8c:a5:30:12:b1:d2:fe:9c:b7:20:b1:6f:b3:0b:b3:00:92:f6:b0:e6:f6:03:f3:d0:c9:d1:f8:28:26:08:30:a4

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate infonet3.bmwgroup.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for infonet3.bmwgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bmw-connecteddrive.com.au
fupo-poc.bmw-connecteddrive.ru
fupo-poc.bmw-connecteddrive.lu
www.bmw-connecteddrive.cz
pilot.bmw-connecteddrive.com.br
pilot.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.dk
fupo-poc.bmw-connecteddrive.at
www.bmw-connecteddrive.nl
infonet3-akamai.bmwgroup.com
fupo-poc.bmw-connecteddrive.my
www.bmw-connecteddrive.no
www.bmw-connecteddrive.lu
fupo-poc.bmw-connecteddrive.it
fupo-poc.bmw-connecteddrive.co.za
www.bmw-connecteddrive.be
www.bmw-connecteddrive.at
pilot.bmw-connecteddrive.ae
assets4-int.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.se
www.bmw-connecteddrive.ru
www.bmw-connecteddrive.ie
log.bmw-connecteddrive.com
pilot.bmw-connecteddrive.com.tr
www.bmw-connecteddrive.com.br
www.bmw-connecteddrive.jp
www.bmw-connecteddrive.co.uk
assets4.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.fi
www.bmw-connecteddrive.fr
fupo-poc.bmw-connecteddrive.mx
www.bmw-connecteddrive.tw
www.bmw-connecteddrive.ch
www.bmw-connecteddrive.es
fupo-poc.bmw-connecteddrive.tw
log-int.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.no
fupo-poc.bmw-connecteddrive.pt
fupo-poc.bmw-connecteddrive.ch
www.bmw-connecteddrive.com.tr
assets2.bmw-connecteddrive.com
pilot.bmw-connecteddrive.fi
fupo-poc.connecteddrive.bmw.co.th
fupo-poc.bmw-connecteddrive.co.uk
assets1.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.cz
infonet3-akamai-int.bmwgroup.com
www.bmw-connecteddrive.com.kw
www.bmw-connecteddrive.my
www.bmw-connecteddrive.co.nz
fupo-poc.bmw-connecteddrive.fr
fupo-poc.bmw-connecteddrive.com.au
www.bmw-connecteddrive.sg
fupo-poc.bmw-connecteddrive.com.br
pilot.bmw-connecteddrive.com.au
www.bmw-connecteddrive.pl
fupo-poc.bmw-connecteddrive.com.tr
www.bmw-connecteddrive.de
fupo-poc.bmw-connecteddrive.jp
www.bmw-connecteddrive.mx
infonet3-int.bmwgroup.com
fupo-poc.bmw-connecteddrive.nl
assets3.bmw-connecteddrive.com
www.bmw-connecteddrive.co.za
fupo-poc.bmw-connecteddrive.ie
fupo-poc.bmw-connecteddrive.de
assets3-int.bmw-connecteddrive.com
www.bmw-connecteddrive.kr
fupo-poc.bmw-connecteddrive.es
www.bmw-connecteddrive.it
www.bmw-connecteddrive.se
fupo-poc.bmw-connecteddrive.kr
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.fi
assets1-int.bmw-connecteddrive.com
www.bmw-connecteddrive.dk
fupo-poc.bmw-connecteddrive.ae
www.bmw-connecteddrive.pt
pilot.bmw-connecteddrive.com.kw
fupo-poc.bmw-connecteddrive.be
fupo-poc.bmw-connecteddrive.co.nz
fupo-poc.bmw-connecteddrive.sg
fupo-poc.bmw-connecteddrive.com.kw
fupo-poc.bmw-connecteddrive.pl
assets2-int.bmw-connecteddrive.com
infonet3.bmwgroup.com

Other certificates including the domain name bmwgroup.com

(limited to 100 certificates)
cosy-int.bmwgroup.com
cuvedat.bmwgroup.com
bsi-service-wen.bmwgroup.com
ebest-gf5-int2.bmwgroup.com
spa-int.sfchina.bmw.com.cn
myair-bdr-us.bmwgroup.com
mein-test.bmwgroup.com
aftersales-configuration.bmwgroup.com
xpita-green.bmwgroup.com
air-int.bmwgroup.com
api.mobilitygraph.bmwgroup.com
e4ni3.bmwgroup.com
drift.bmwgroup.com
sgate2-int-apac.bmwgroup.com
p44-tracking-data-prod.bmwgroup.com
wissensfinder.bmwgroup.com
sparc-int.bmwgroup.com
e-180.com
df3test-bmwinfobahn.bmwgroup.com
lcs-int.bmwgroup.com
apisec.bmwgroup.com
srpmm-api-i.bmwgroup.com
ispanext-user-int-gf4.bmwgroup.com
rwebmeter.bmwgroup.com
aida-i.bmwgroup.com
nachhaltigkeit-newsletter.bmwgroup.com
dealerportalsg-int.bmwgroup.com
zadea-i.bmwgroup.com
spoa-int-2.bmwgroup.com
h5vco-bmw-test.bmwgroup.com
swg-mx.bmwgroup.com
uat-infobahn.bmwgroup.com
alscore-int.bmwgroup.com
dfegateway-i2.bmwgroup.com
csp-gft.bmwgroup.com
carver.bmwgroup.com
dealerservices-t.bmwgroup.com
tmsi-i.bmwgroup.com
osm-cloud-uat-kr.bmwgroup.com
vcs-gf4-t.bmwgroup.com
stabi.bmwgroup.com
h5vco.bmwgroup.com
plw-prod1.bmwgroup.com
h5vco-int.bmwgroup.com
osm-cloud-int-fed-eu.bmwgroup.com
eccza.bmwgroup.com
b2dua4.bmwgroup.com
conrecordtest.bmwgroup.com
srmza.bmwgroup.com
ilz-device-qa.bmwgroup.com
passworddev.bmwgroup.com
alclaims-test.bmwgroup.com
ispanext-user-prod-us-ig-weam.bmwgroup.com
zeus-neu.bmwgroup.com
ddaus-p-gf4.bmwgroup.com
cmscn-int.bmwgroup.com
kai-user-qa-eam.bmwgroup.com
topdrive-i.bmwgroup.com
mocu-int.bmwgroup.com
bch.eu-central-1.test.iis.connected.bmw
dealerservices-test.bmwgroup.com
oasis.bmwgroup.com
www.charging.bmwgroup.com
myc-profile-int.bmwgroup.com
dealercockpit-aos.bmwgroup.com
cargo-auth-ddr-int.bmwgroup.com
vcommus.bmwgroup.com
mediapool-i3.bmwgroup.com
nasf-as-tp-technical-campaign.bmwgroup.com
alertnowpbf00.bmwgroup.com
acc-fa-be-alph.bmwgroup.com
prod-mybmw-auth.bmwgroup.com
msdcrm365-int.bmwgroup.com
noaifa.bmwgroup.com
eaina-wen-int.bmwgroup.com
infonet3.bmwgroup.com
test.mini-mx.bmwgroup.com
www.bmw.de
trz-device-qa-us.bmwgroup.com
www.bmw.com
fsconnect-int-next.bmwgroup.com
b2dua-int.bmwgroup.com
gqs-i.bmwgroup.com
air-services-qa1-wen-basic.bmwgroup.com
ispanext-device-qa-cn-weam.bmwgroup.com
pita-dev.bmwgroup.com
usp22-test.bmwgroup.com
myair-bdr-qa2.bmwgroup.com
ics.bmwgroup.com
ispanext-user-int-weam.bmwgroup.com
swg-mx.bmwgroup.com
apisec-i.bmwgroup.com
ispanext-user-qa-ig-weam.bmwgroup.com
vcsus-t.bmwgroup.com
uctemeasip02.bmwgroup.net
air-services-b2i-int.bmwgroup.com
crowd-innovation.bmwgroup.com
ivpbg-new.bmwgroup.com
ult-test.bmwgroup.com
cfs-ch-int2.bmwgroup.com

Certificate

The complete raw certificate details for infonet3.bmwgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPmjCCDoKgAwIBAgIQIirONs0fId2Ixq/3p70AhTANBgkqhkiG9w0BAQsFADBE
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEdMBsGA1UEAxMU
R2VvVHJ1c3QgU1NMIENBIC0gRzMwHhcNMTcxMTE1MDAwMDAwWhcNMTkwMTE0MjM1
OTU5WjCBkjELMAkGA1UEBhMCREUxEDAOBgNVBAgMB0JhdmFyaWExDzANBgNVBAcM
Bk11bmljaDEkMCIGA1UECgwbQmF5ZXJpc2NoZSBNb3RvcmVuIFdlcmtlIEFHMRow
GAYDVQQLDBFBa2FtYWkgU0FOIFNTTCBPVjEeMBwGA1UEAwwVaW5mb25ldDMuYm13
Z3JvdXAuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+98dAPr
YfSyKJoAbIcpnvn10vEMJLNBt2JnX2q3ke7OIryD6nZdy/I/sFlHUhjN6NNUsjJU
9WyXLMMWwv6zsqhBDWUOd4cvj/eUu6nuJOP4Uk+Ij2jr3lFH0kvwa82uRzWbB+L8
nTfe5nstFoMoKvyFVw7IddEMvf333sK2mZYijvQ3lVjuBtIG3QCQdvalM2ZBwdn5
Ks/Q0p/dyCqoegO7SQbDSwOvdXkQBDufz8r+FECf227jLvG0BBDsfLROCiewSF2z
rnUBqPQKHEo0LCvtUxip0YV9iHR7FOqyr0IJ0P9YD2YEjBEQaaSeKZh41v0bZqjV
1I91PgDRh87NfwIDAQABo4IMNzCCDDMwggqZBgNVHREEggqQMIIKjIIdd3d3LmJt
dy1jb25uZWN0ZWRkcml2ZS5jb20uYXWCHmZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRk
cml2ZS5ydYIeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRyaXZlLmx1ghl3d3cuYm13
LWNvbm5lY3RlZGRyaXZlLmN6gh9waWxvdC5ibXctY29ubmVjdGVkZHJpdmUuY29t
LmJyghxwaWxvdC5ibXctY29ubmVjdGVkZHJpdmUuY29tgh5mdXBvLXBvYy5ibXct
Y29ubmVjdGVkZHJpdmUuZGuCHmZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2ZS5h
dIIZd3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5ubIIcaW5mb25ldDMtYWthbWFpLmJt
d2dyb3VwLmNvbYIeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRyaXZlLm15ghl3d3cu
Ym13LWNvbm5lY3RlZGRyaXZlLm5vghl3d3cuYm13LWNvbm5lY3RlZGRyaXZlLmx1
gh5mdXBvLXBvYy5ibXctY29ubmVjdGVkZHJpdmUuaXSCIWZ1cG8tcG9jLmJtdy1j
b25uZWN0ZWRkcml2ZS5jby56YYIZd3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5iZYIZ
d3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5hdIIbcGlsb3QuYm13LWNvbm5lY3RlZGRy
aXZlLmFlgiJhc3NldHM0LWludC5ibXctY29ubmVjdGVkZHJpdmUuY29tgh5mdXBv
LXBvYy5ibXctY29ubmVjdGVkZHJpdmUuc2WCGXd3dy5ibXctY29ubmVjdGVkZHJp
dmUucnWCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUuaWWCGmxvZy5ibXctY29ubmVj
dGVkZHJpdmUuY29tgh9waWxvdC5ibXctY29ubmVjdGVkZHJpdmUuY29tLnRygh13
d3cuYm13LWNvbm5lY3RlZGRyaXZlLmNvbS5icoIZd3d3LmJtdy1jb25uZWN0ZWRk
cml2ZS5qcIIcd3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5jby51a4IeYXNzZXRzNC5i
bXctY29ubmVjdGVkZHJpdmUuY29tgh5mdXBvLXBvYy5ibXctY29ubmVjdGVkZHJp
dmUuZmmCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUuZnKCHmZ1cG8tcG9jLmJtdy1j
b25uZWN0ZWRkcml2ZS5teIIZd3d3LmJtdy1jb25uZWN0ZWRkcml2ZS50d4IZd3d3
LmJtdy1jb25uZWN0ZWRkcml2ZS5jaIIZd3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5l
c4IeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRyaXZlLnR3gh5sb2ctaW50LmJtdy1j
b25uZWN0ZWRkcml2ZS5jb22CHmZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2ZS5u
b4IeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRyaXZlLnB0gh5mdXBvLXBvYy5ibXct
Y29ubmVjdGVkZHJpdmUuY2iCHXd3dy5ibXctY29ubmVjdGVkZHJpdmUuY29tLnRy
gh5hc3NldHMyLmJtdy1jb25uZWN0ZWRkcml2ZS5jb22CG3BpbG90LmJtdy1jb25u
ZWN0ZWRkcml2ZS5maYIhZnVwby1wb2MuY29ubmVjdGVkZHJpdmUuYm13LmNvLnRo
giFmdXBvLXBvYy5ibXctY29ubmVjdGVkZHJpdmUuY28udWuCHmFzc2V0czEuYm13
LWNvbm5lY3RlZGRyaXZlLmNvbYIad3d3LmJtdy1jb25uZWN0ZWRkcml2ZS5jb22C
GXd3dy5ibXctY29ubmVjdGVkZHJpdmUuYWWCHmZ1cG8tcG9jLmJtdy1jb25uZWN0
ZWRkcml2ZS5jeoIgaW5mb25ldDMtYWthbWFpLWludC5ibXdncm91cC5jb22CHXd3
dy5ibXctY29ubmVjdGVkZHJpdmUuY29tLmt3ghl3d3cuYm13LWNvbm5lY3RlZGRy
aXZlLm15ghx3d3cuYm13LWNvbm5lY3RlZGRyaXZlLmNvLm56gh5mdXBvLXBvYy5i
bXctY29ubmVjdGVkZHJpdmUuZnKCImZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2
ZS5jb20uYXWCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUuc2eCImZ1cG8tcG9jLmJt
dy1jb25uZWN0ZWRkcml2ZS5jb20uYnKCH3BpbG90LmJtdy1jb25uZWN0ZWRkcml2
ZS5jb20uYXWCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUucGyCImZ1cG8tcG9jLmJt
dy1jb25uZWN0ZWRkcml2ZS5jb20udHKCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUu
ZGWCHmZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2ZS5qcIIZd3d3LmJtdy1jb25u
ZWN0ZWRkcml2ZS5teIIZaW5mb25ldDMtaW50LmJtd2dyb3VwLmNvbYIeZnVwby1w
b2MuYm13LWNvbm5lY3RlZGRyaXZlLm5sgh5hc3NldHMzLmJtdy1jb25uZWN0ZWRk
cml2ZS5jb22CHHd3dy5ibXctY29ubmVjdGVkZHJpdmUuY28uemGCHmZ1cG8tcG9j
LmJtdy1jb25uZWN0ZWRkcml2ZS5pZYIeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRy
aXZlLmRlgiJhc3NldHMzLWludC5ibXctY29ubmVjdGVkZHJpdmUuY29tghl3d3cu
Ym13LWNvbm5lY3RlZGRyaXZlLmtygh5mdXBvLXBvYy5ibXctY29ubmVjdGVkZHJp
dmUuZXOCGXd3dy5ibXctY29ubmVjdGVkZHJpdmUuaXSCGXd3dy5ibXctY29ubmVj
dGVkZHJpdmUuc2WCHmZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2ZS5rcoIfZnVw
by1wb2MuYm13LWNvbm5lY3RlZGRyaXZlLmNvbYIZd3d3LmJtdy1jb25uZWN0ZWRk
cml2ZS5maYIiYXNzZXRzMS1pbnQuYm13LWNvbm5lY3RlZGRyaXZlLmNvbYIZd3d3
LmJtdy1jb25uZWN0ZWRkcml2ZS5ka4IeZnVwby1wb2MuYm13LWNvbm5lY3RlZGRy
aXZlLmFlghl3d3cuYm13LWNvbm5lY3RlZGRyaXZlLnB0gh9waWxvdC5ibXctY29u
bmVjdGVkZHJpdmUuY29tLmt3gh5mdXBvLXBvYy5ibXctY29ubmVjdGVkZHJpdmUu
YmWCIWZ1cG8tcG9jLmJtdy1jb25uZWN0ZWRkcml2ZS5jby5ueoIeZnVwby1wb2Mu
Ym13LWNvbm5lY3RlZGRyaXZlLnNngiJmdXBvLXBvYy5ibXctY29ubmVjdGVkZHJp
dmUuY29tLmt3gh5mdXBvLXBvYy5ibXctY29ubmVjdGVkZHJpdmUucGyCImFzc2V0
czItaW50LmJtdy1jb25uZWN0ZWRkcml2ZS5jb22CFWluZm9uZXQzLmJtd2dyb3Vw
LmNvbTAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDArBgNVHR8EJDAiMCCgHqAc
hhpodHRwOi8vZ24uc3ltY2IuY29tL2duLmNybDCBnQYDVR0gBIGVMIGSMIGPBgZn
gQwBAgIwgYQwPwYIKwYBBQUHAgEWM2h0dHBzOi8vd3d3Lmdlb3RydXN0LmNvbS9y
ZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDBBBggrBgEFBQcCAjA1DDNodHRwczov
L3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL3JlcG9zaXRvcnkvbGVnYWwwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFNJv95b0hT9y
PDB9I9qFeJujfFp8MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDov
L2duLnN5bWNkLmNvbTAmBggrBgEFBQcwAoYaaHR0cDovL2duLnN5bWNiLmNvbS9n
bi5jcnQwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBABNm
ZE+AmUCB+2AruWz7M7qL0ElhqobBpLECMlHjOKz+hMYghCTRWfpqG5Px1wdaMXCu
IOKzHPQmAoE7yCUSmb2mEYnvp9GIjDLs1H7HHVjj6eEpiaOgf6h5zjgpuYhdfgOp
HRiQykpMb3e3gDbh3HKnp9zS/O0hfydvHka1xYsrwUYeJZuO1Rqt+k2yKhvBwfgx
WeQZpzqQCwy0N6sIfrDt84PqmJvP3V2+qwDKQR9LsXuf96/zW0BGzcn1LQpzoic8
FGZX7vkSC8gAXUykb8K2QfQulVzWuoCyHFcvmPHR1N4EWkbgrA4PMtVkQVQ369Ss
ipI/rCuBewVwSQyuuZU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs+98dAPrYfSyKJoAbIcp
nvn10vEMJLNBt2JnX2q3ke7OIryD6nZdy/I/sFlHUhjN6NNUsjJU9WyXLMMWwv6z
sqhBDWUOd4cvj/eUu6nuJOP4Uk+Ij2jr3lFH0kvwa82uRzWbB+L8nTfe5nstFoMo
KvyFVw7IddEMvf333sK2mZYijvQ3lVjuBtIG3QCQdvalM2ZBwdn5Ks/Q0p/dyCqo
egO7SQbDSwOvdXkQBDufz8r+FECf227jLvG0BBDsfLROCiewSF2zrnUBqPQKHEo0
LCvtUxip0YV9iHR7FOqyr0IJ0P9YD2YEjBEQaaSeKZh41v0bZqjV1I91PgDRh87N
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 45416010842926794091973209974349037701
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Akamai SAN SSL OV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'infonet3.bmwgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22714751608610481261173407423785186761357044372096315546181075737332906580302541936278626053178732928424678562222416569808974592760908463647514582274434382944888030980358972163663411787641046470156697085151039255966438039784606855284061474909076492085969132018558907856799394312116896706191084901955671876332192632432132986747344259256178630031836127172007609394482819964427586654658901967827529682882877959248215639333400997490852446252758638406808052279323332231545391164230304649258718503454680607619358363229664956730198092617172925987655105888255677546624444835460895640615385254998196368633867104590165649051007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2704 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets4-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'log.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets4.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'log-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.connecteddrive.bmw.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets1.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-akamai-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3-int.bmwgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets3.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets3-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets1-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-connecteddrive.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pilot.bmw-connecteddrive.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.com.kw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-poc.bmw-connecteddrive.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets2-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infonet3.bmwgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001366644f80994081fb602bb96cfb33ba8bd04961aa86c1a4b1023251e338acfe84c6208424d159fa6a1b93f1d7075a3170ae20e2b31cf42602813bc8251299bda61189efa7d1888c32ecd47ec71d58e3e9e12989a3a07fa879ce3829b9885d7e03a91d1890ca4a4c6f77b78036e1dc72a7a7dcd2fced217f276f1e46b5c58b2bc1461e259b8ed51aadfa4db22a1bc1c1f83159e419a73a900b0cb437ab087eb0edf383ea989bcfdd5dbeab00ca411f4bb17b9ff7aff35b4046cdc9f52d0a73a2273c146657eef9120bc8005d4ca46fc2b641f42e955cd6ba80b21c572f98f1d1d4de045a46e0ac0e0f32d564415437ebd4ac8a923fac2b817b0570490caeb995