ahag-group.bmw

Issued by R3

About this certificate

This digital certificate with serial number 04:41:2e:03:b1:11:ba:52:c3:9e:6a:2f:24:5d:8c:61:9a:c5 was issued on by Let's Encrypt.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ahag-group.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:41:2e:03:b1:11:ba:52:c3:9e:6a:2f:24:5d:8c:61:9a:c5
Serial Number (int): 370628661232989711322867246667089383103173
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 5c:8f:cd:19:2c:6a:18:5e:ac:72:ed:12:d9:5d:ea:0e:5f:4c:d2:ef
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): d8:ec:8b:d3:a2:de:f0:dd:25:0d:58:f6:f7:18:78:a2:be:d4:88:0a
Fingerprint (sha256): ca:96:09:68:d2:ad:b8:21:35:95:d6:17:6e:fe:14:a5:ae:23:b2:55:eb:9c:1d:c7:29:87:da:aa:06:87:52:50

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate ahag-group.bmw

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ahag-group.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ahag-group.bmw
autohaus-gottstein.de
autohaus-winter.bmw
backhaus-service.bmw
bmw-autohaus-matthes.de
bmw-blockamring.de
bmw-bothe.de
bmw-briem.de
bmw-brinkmann.de
bmw-bundk.de
bmw-service-autohaus-mm.de
bmw-service-bernhardt.de
bmw-service-bothe.de
bmw-service-buehler-ruff.de
bmw-service-fritz.de
bmw-service-guenther.de
bmw-service-menke.de
braun-service.bmw
buzziol-service.bmw
deckert-service.bmw
dennemarck-service.bmw
ebers-service.bmw
lb.bmw-dealer.corpex-kunden.de
www.autohaus-gottstein.de
www.autohaus-grieb.de
www.autohaus-reier.com
www.autohaus-reier.de
www.autohaus-waldmueller.de
www.autoschmidt-saarburg.de
www.bachfrieder.bmw
www.bmw-autoschmidt-saarburg.de
www.bmw-degner.de
www.bmw-grieb.de
www.bmw-guenther.de
www.bmw-jena.de
www.bmw-mueller-hollfeld.de
www.bmw-service-bothe.de
www.bmw-service-cyran.de
www.bmw-service-grieb.de
www.bmw-service-guenther.de
www.bmw-service-kuehnl.de
www.bmw-service-pilz.de
www.bmw-waldmueller.de
www.fiebig-bmw-in-jena.de
www.fiebig-jena.de
www.helming.bmw
www.mueller-hollfeld.de
www.reier-berlin.de
www.reier-oranienburg.de
www.xn--bmw-waldmller-4ob.de

Other certificates including the domain name ahag-group.bmw

(limited to 100 certificates)

Certificate

The complete raw certificate details for ahag-group.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIJoDCCCIigAwIBAgISBEEuA7ERulLDnmovJF2MYZrFMA0GCSqGSIb3DQEBCwUA
MDIxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MQswCQYDVQQD
EwJSMzAeFw0yMjA5MDgwOTIzMTVaFw0yMjEyMDcwOTIzMTRaMBkxFzAVBgNVBAMT
DmFoYWctZ3JvdXAuYm13MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
woGAASsm9Ki2RlWqt3bl2M5z/+aXsdHq1TGg1TKNP2CW1iWMGgYi+I6T8uv3P+yK
VJebt37D5/9G53kKyRrAmWMh+6aHhYGz36jOn2ynqzD3JkrVldh5m7TyuMUX/q5u
9RSRuAj+kwWo8U5d7JKzV65Sw7xTXdLhtBH2tOZL9HURKCr8O7o3EFBpx/pvMCy8
/eXAyYMRjxlVsgNmvIR/z9lnAZhjrBycEvLGrjofWzowmdiR5Hpfqe2N0Ulop+RH
kTUvyKRZBlIzjkbcHfzlKpN/uui/d00OqAJUhU520NEzdVBux9C7b3qOS87YrHGw
2s+Hk1zkuT/neVDoTNcwYwIDAQABo4IGxzCCBsMwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAMBgNVHRMBAf8EAjAAMB0GA1Ud
DgQWBBRcj80ZLGoYXqxy7RLZXeoOX0zS7zAfBgNVHSMEGDAWgBQULrMXt1hWy65Q
CUDmH6+dixTCxjBVBggrBgEFBQcBAQRJMEcwIQYIKwYBBQUHMAGGFWh0dHA6Ly9y
My5vLmxlbmNyLm9yZzAiBggrBgEFBQcwAoYWaHR0cDovL3IzLmkubGVuY3Iub3Jn
LzCCBJQGA1UdEQSCBIswggSHgg5haGFnLWdyb3VwLmJtd4IVYXV0b2hhdXMtZ290
dHN0ZWluLmRlghNhdXRvaGF1cy13aW50ZXIuYm13ghRiYWNraGF1cy1zZXJ2aWNl
LmJtd4IXYm13LWF1dG9oYXVzLW1hdHRoZXMuZGWCEmJtdy1ibG9ja2FtcmluZy5k
ZYIMYm13LWJvdGhlLmRlggxibXctYnJpZW0uZGWCEGJtdy1icmlua21hbm4uZGWC
DGJtdy1idW5kay5kZYIaYm13LXNlcnZpY2UtYXV0b2hhdXMtbW0uZGWCGGJtdy1z
ZXJ2aWNlLWJlcm5oYXJkdC5kZYIUYm13LXNlcnZpY2UtYm90aGUuZGWCG2Jtdy1z
ZXJ2aWNlLWJ1ZWhsZXItcnVmZi5kZYIUYm13LXNlcnZpY2UtZnJpdHouZGWCF2Jt
dy1zZXJ2aWNlLWd1ZW50aGVyLmRlghRibXctc2VydmljZS1tZW5rZS5kZYIRYnJh
dW4tc2VydmljZS5ibXeCE2J1enppb2wtc2VydmljZS5ibXeCE2RlY2tlcnQtc2Vy
dmljZS5ibXeCFmRlbm5lbWFyY2stc2VydmljZS5ibXeCEWViZXJzLXNlcnZpY2Uu
Ym13gh5sYi5ibXctZGVhbGVyLmNvcnBleC1rdW5kZW4uZGWCGXd3dy5hdXRvaGF1
cy1nb3R0c3RlaW4uZGWCFXd3dy5hdXRvaGF1cy1ncmllYi5kZYIWd3d3LmF1dG9o
YXVzLXJlaWVyLmNvbYIVd3d3LmF1dG9oYXVzLXJlaWVyLmRlght3d3cuYXV0b2hh
dXMtd2FsZG11ZWxsZXIuZGWCG3d3dy5hdXRvc2NobWlkdC1zYWFyYnVyZy5kZYIT
d3d3LmJhY2hmcmllZGVyLmJtd4Ifd3d3LmJtdy1hdXRvc2NobWlkdC1zYWFyYnVy
Zy5kZYIRd3d3LmJtdy1kZWduZXIuZGWCEHd3dy5ibXctZ3JpZWIuZGWCE3d3dy5i
bXctZ3VlbnRoZXIuZGWCD3d3dy5ibXctamVuYS5kZYIbd3d3LmJtdy1tdWVsbGVy
LWhvbGxmZWxkLmRlghh3d3cuYm13LXNlcnZpY2UtYm90aGUuZGWCGHd3dy5ibXct
c2VydmljZS1jeXJhbi5kZYIYd3d3LmJtdy1zZXJ2aWNlLWdyaWViLmRlght3d3cu
Ym13LXNlcnZpY2UtZ3VlbnRoZXIuZGWCGXd3dy5ibXctc2VydmljZS1rdWVobmwu
ZGWCF3d3dy5ibXctc2VydmljZS1waWx6LmRlghZ3d3cuYm13LXdhbGRtdWVsbGVy
LmRlghl3d3cuZmllYmlnLWJtdy1pbi1qZW5hLmRlghJ3d3cuZmllYmlnLWplbmEu
ZGWCD3d3dy5oZWxtaW5nLmJtd4IXd3d3Lm11ZWxsZXItaG9sbGZlbGQuZGWCE3d3
dy5yZWllci1iZXJsaW4uZGWCGHd3dy5yZWllci1vcmFuaWVuYnVyZy5kZYIcd3d3
LnhuLS1ibXctd2FsZG1sbGVyLTRvYi5kZTBMBgNVHSAERTBDMAgGBmeBDAECATA3
BgsrBgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNy
eXB0Lm9yZzCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3AN+lXqtogk8fbK3uuF9O
PlrqzaISpGpejjsSwCBEXCpzAAABgxygECsAAAQDAEgwRgIhAPyjLfyGuQLMCKQm
uCJimHnbBsYlBwaM2OVkfwMqsAwrAiEA5TOrcrNeCp3pCW/PbVBid5bpYxAdbhSB
uDq+6fluy6UAdgBGpVXrdfqRIDC1oolp9PN9ESxBdL79SbiFq/L8cP5tRwAAAYMc
oBDnAAAEAwBHMEUCIBU6t1BMBFgKoiSmXoiGhV+e5gUKn/k53T47ObBu/E7JAiEA
hxneRMbLYAIoLy34CXSKXApH7GzH5izXV/eiIxLgOfIwDQYJKoZIhvcNAQELBQAD
ggEBADGRpc+l314a65ZjT6RWlUHVLUbk9lB1Q0J2jeGSt6Al70BUh5za7h6WfVFy
btZDI2FBAyjPCQJAm00qqGP6R5UusUuAs2fpk3Iu2Og932eFdFO1CBU6zApkyth8
8+OERw7TGStk+WhmYX+arpWlqDf4y6BskRnHnxsyNzraH+iIdu3kEttCYlK7VpiT
5/n/FTApWM8m0dWVVhqbI460O37oyIvqMtqFPHPhJFbl0SnM1bd4t+nZReUKRuXG
1Y4t+BIYmjpgdUr1ceHgHIOpCfj8WECF78hFY/cFd4pVHUAwsYB16j1Lf8tCZWy/
0qr1ZfgyPKloMc/PgSjH02ycMMU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoGAASsm9Ki2RlWqt3bl
2M5z/+aXsdHq1TGg1TKNP2CW1iWMGgYi+I6T8uv3P+yKVJebt37D5/9G53kKyRrA
mWMh+6aHhYGz36jOn2ynqzD3JkrVldh5m7TyuMUX/q5u9RSRuAj+kwWo8U5d7JKz
V65Sw7xTXdLhtBH2tOZL9HURKCr8O7o3EFBpx/pvMCy8/eXAyYMRjxlVsgNmvIR/
z9lnAZhjrBycEvLGrjofWzowmdiR5Hpfqe2N0Ulop+RHkTUvyKRZBlIzjkbcHfzl
KpN/uui/d00OqAJUhU520NEzdVBux9C7b3qOS87YrHGw2s+Hk1zkuT/neVDoTNcw
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 370628661232989711322867246667089383103173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-08 09:23:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-07 09:23:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ahag-group.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24554090002259286748271234940442255278278238459473680896457083519799406934414276868715220209845877246220231066468275964775984919631871595012050473854100123499343697840147139122329277016389895185274929804979752136404047872977915907423182525115357779456917180280826462679729833796705905079410562791029792967447763394114348426288961944163582088292636939528218149706219730128356054431389183897451407856129795813537097022752769427802226155291321803040549955032602656811710126967440824811500687462147470918272406008088519274627843477613745702262932905760182110916586271469103853815752622794428936101117310192601404955635811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5c8fcd192c6a185eac72ed12d95dea0e5f4cd2ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ahag-group.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-winter.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backhaus-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-matthes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-blockamring.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-briem.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-brinkmann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bundk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-mm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bernhardt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-buehler-ruff.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fritz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-guenther.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-menke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'braun-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buzziol-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deckert-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dennemarck-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebers-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lb.bmw-dealer.corpex-kunden.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-grieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-reier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autohaus-waldmueller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bachfrieder.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-degner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-grieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-guenther.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-jena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-mueller-hollfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-cyran.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-grieb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-guenther.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-kuehnl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-service-pilz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-waldmueller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiebig-bmw-in-jena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fiebig-jena.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.helming.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mueller-hollfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reier-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reier-oranienburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--bmw-waldmller-4ob.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a73000001831ca0102b0000040300483046022100fca32dfc86b902cc08a426b822629879db06c62507068cd8e5647f032ab00c2b022100e533ab72b35e0a9de9096fcf6d50627796e963101d6e1481b83abee9f96ecba500760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d47000001831ca010e700000403004730450220153ab7504c04580aa224a65e8886855f9ee6050a9ff939dd3e3b39b06efc4ec90221008719de44c6cb6002282f2df809748a5c0a47ec6cc7e62cd757f7a22312e039f2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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