www-origin-proda2.bmw.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 19:82:c9:29:d5:88:ab:ca:18:9b:22:2e was issued on by GlobalSign nv-sa.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:82:c9:29:d5:88:ab:ca:18:9b:22:2e
Serial Number (int): 7895235569449829343006761518
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 65:f6:f1:e5:34:5e:1a:8d:45:dd:6e:51:ea:8d:12:ad:f2:5e:c5:be
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 5b:e0:60:d1:8d:50:07:4d:7f:ee:d8:01:e5:38:2f:a6:72:ba:fa:af
Fingerprint (sha256): 97:0e:62:95:dd:18:98:99:e0:e3:1b:d1:a5:da:7d:74:df:44:ad:8a:c7:43:89:e8:1d:dc:02:38:98:e8:52:5c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www-origin-proda2.bmw.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-origin-proda2.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-origin-proda2.bmw.com
bmw-m.com
bmw.at
bmw.be
bmw.bg
bmw.ca
bmw.ch
bmw.cl
bmw.co.id
bmw.co.jp
bmw.co.kr
bmw.co.nz
bmw.co.uk
bmw.co.za
bmw.com
bmw.com.au
bmw.com.br
bmw.com.co
bmw.com.gt
bmw.com.mx
bmw.com.pa
bmw.com.pe
bmw.com.py
bmw.com.tr
bmw.com.tw
bmw.com.uy
bmw.cz
bmw.de
bmw.dk
bmw.ee
bmw.es
bmw.fi
bmw.fr
bmw.gr
bmw.hu
bmw.ie
bmw.in
bmw.it
bmw.lt
bmw.lu
bmw.lv
bmw.my
bmw.nl
bmw.no
bmw.pl
bmw.pt
bmw.ro
bmw.ru
bmw.se
bmw.si
bmw.sk
bmwhk.com
bmwlat.com
munichauto.com.sg
next100.bmw
pml-bmw.com.sg
www-origin.bmw-prod2.com
www-origin.bmw-prod3.com

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
individual.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com
www.mini.rs
pluto-i1.bmw.com
swt-t.bmw.com

Certificate

The complete raw certificate details for www-origin-proda2.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIyRbD0KHePS5iHcGhT/
e/jsQamdQjyg1qoXm7rfrUO93XzcuSBf6v36kWqVxtXrqa0bvwP4Oe4oF3kBwler
cONcAGS9I8vn1EStzaN11CRvEoX5gwIvCTCm1j8Y3+dNYuGqIgcL/15Iax9TVC1o
v3LK3IW79bcleSzdJ93Qk/7vWcyEBIw/+ilJzjQTLlNoLzSEOxLz2xa5HuQk64aO
bJZMg5h7LlbpKBeLFMiYVOlz78plNKAOMuCqyRv0ODTUXYFzUv3gC7JpdTKx/rRd
EwY+Et4plPyn6V540S5h39P9qn6fmWDTnS1eSNJ1lIt0ggIjjAkRWNppbZMAQe7N
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7895235569449829343006761518
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-29 09:21:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-30 09:21:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-origin-proda2.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25821930905864129004907728983526773990909054424256769039102067810134489327293510625577648894707182048139789070571767419812998531239179975480528088337470921888516292594241471105769216574391604940222200952231672425922891492038099782617460446562886313569314254258439162915092341755607682396666846506874603041331979538252784396367746282332836924094652918780222671620339962469023821672766800499517372993325370052524315036768004264253896182826148136663812231703379502691168690443870078453175983847845669726838335156740735620436748795795200391450156439256902784487473658740913524965512371969114626343526725672708681262616043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (620 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin-proda2.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-m.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.pa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.py'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwhk.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwlat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'munichauto.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'next100.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pml-bmw.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin.bmw-prod2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin.bmw-prod3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65f6f1e5345e1a8d45dd6e51ea8d12adf25ec5be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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