redirect-letsencrypt4.dealermaster-de.bmw

Issued by R3

About this certificate

This digital certificate with serial number 04:fd:da:61:9c:dd:05:11:67:4d:dd:2f:e3:70:bd:f8:37:ac was issued on by Let's Encrypt.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=redirect-letsencrypt4.dealermaster-de.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:fd:da:61:9c:dd:05:11:67:4d:dd:2f:e3:70:bd:f8:37:ac
Serial Number (int): 434830861095481697931243501242565806012332
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 03:fc:55:13:6e:61:26:ba:40:b8:c9:00:ac:80:2b:c6:22:c9:44:69
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 4d:66:ec:83:7e:d0:ff:3e:17:d5:bb:d2:7d:71:81:a5:88:b0:e2:e7
Fingerprint (sha256): b9:b0:89:c8:8f:e5:91:5e:5c:bd:ef:28:3e:58:e1:0e:11:20:42:61:b0:ec:f1:b1:f7:5c:e0:4d:fd:02:22:bb

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redirect-letsencrypt4.dealermaster-de.bmw

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirect-letsencrypt4.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autohaus-reier.com
autohaus-reier.de
autohaus-schmauser.de
automobile-goernitz.de
autoschmidt-saarburg.de
bmw-auto-eichhorn.de
bmw-autohaus-gottstein.de
bmw-autohaus-matthes.de
bmw-bothe.de
bmw-bundk.de
bmw-emmerich.de
bmw-fritze.de
bmw-hans-brandenburg.de
bmw-heermann-rhein.de
bmw-kainz.de
bmw-m-suedwest.de
bmw-motorrad-event.de
bmw-reier.de
bmw-rhein-bodensee.de
bmw-rhein-ludwigsburg.de
bmw-schmid-elzach.de
bmw-service-auto-weiss.de
bmw-service-autohaus-mm.de
bmw-service-bothe.de
bmw-service-fritz.de
bmw-service-goernitz.de
bmw-service-grotewohlt.de
bmw-service-guelke.de
bmw-service-hannemann.de
bmw-service-haupt.de
bmw-service-isernhagen.de
bmw-service-jungmayer.de
bmw-service-knopf.de
bmw-service-langlinderer.de
bmw-service-maier.de
bmw-service-neumeier-seidl.de
bmw-service-raudzus.de
bmw-service-reith.de
bmw-service-riegel.de
bmw-service-rosenkranz.de
bmw-service-schmauser.de
bmw-service-schwarz.de
bmw-service-stahmer.de
bmw-service-weiss.de
bmw-tief-doerfler.de
bmwserviceschmauser.de
fuchs.bmw
kellner-service.bmw
muhra.bmw
redirect-letsencrypt4.dealermaster-de.bmw
reier-berlin.de
reier-oranienburg.de
rhein.bmw
riedel.bmw
schmauser-service.bmw
seifert-service.bmw
weiss-bmw.de
www.bmw-schmid-elzach.de

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for redirect-letsencrypt4.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvFfX1yL4zkfzPAslBQ9G
WlVEmnnH4Spdfq0SEFMStcqhCMhxBeNkXNLtn/7utxsG6hIlUbxGv+ALl2iETkn6
NsTZrvdBBnzjWEjiEiO/BH4XLkPzYeLseaI6y5CGYUC14coJG/eTeRBjjcNZ/A13
9WI9uaQlTlM7hW+EXd3PSbiSuo0nthD5S/VL455iJZm0TfLHUdJBr1DhtTvcNmnT
9f1CDaEJ5XK6NQUY+FrN9DSNqwW/M3dZeJV/LCt161aAhVhvOy0eu2xP1bgXJT7G
s6svf6RtXeFjBawp3dlNu7DFO7st2KZ5EMdp33IgH6RZHzG5w8UIpllGrbtmzLx+
zQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 434830861095481697931243501242565806012332
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-14 12:24:16 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-12 12:24:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23776118393732357059055599974816143412906818491034973124998497371548125799825123179032602746887677575151349756227484872123005019454350216214556462885589372544464304547137919128797902164529218652650548898583481378556136299301337634886006097481437902464079130760911614972621392757443506817332180449607994722890209046859365970666793966166188457079320133601356746154665083827471678763698391333626310217171192338963859248861060232769081144892616388900593810036419205025555786156911130862985785468407670214002114645557556915313799904399586935764961107360423927464368297867121015104626241108537722061250507165215163911274189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							03fc55136e6126ba40b8c900ac802bc622c94469
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1287 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-auto-eichhorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-matthes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bundk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-emmerich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-fritze.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-hans-brandenburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-heermann-rhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-kainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-m-suedwest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-motorrad-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-bodensee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-ludwigsburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-auto-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-mm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fritz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-grotewohlt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-guelke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-hannemann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-haupt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-isernhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-jungmayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-knopf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-langlinderer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-maier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-neumeier-seidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-raudzus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-reith.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-riegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-rosenkranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schwarz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-stahmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-tief-doerfler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwserviceschmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchs.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellner-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhra.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-oranienburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhein.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riedel.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmauser-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiss-bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bce010cc500000403004730450220224747c7bf9010597935b0e75461ad71aecf8a201b7172a0c566da56e98adaba0221009310ee54d908011a6a3c88965d4daa155688b8a4fe6c954a3ed527e44eb1a4ef0075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bce010cc4000004030046304402203d63e9efe92169fbd00ae67c22d0f6162c1e52dddddf35c5411459ca5f69032502205048d233310de9eeb17ab2664fb346ced41383e05dac0258378222eb9a5f5df6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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