redirect-letsencrypt4.dealermaster-de.bmw

Issued by R3

About this certificate

This digital certificate with serial number 03:a0:39:e0:5b:72:4c:8a:43:56:bb:0e:69:ca:40:4e:35:ab was issued on by Let's Encrypt.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=redirect-letsencrypt4.dealermaster-de.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:a0:39:e0:5b:72:4c:8a:43:56:bb:0e:69:ca:40:4e:35:ab
Serial Number (int): 315858967427641918569592068808865095759275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 5c:d7:8c:4c:fc:89:74:6c:47:e8:0b:cc:7e:50:08:b0:d3:d3:b3:0a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 5a:4b:21:1c:da:f8:6f:c5:fe:55:2f:8f:df:47:a1:d5:be:9d:62:95
Fingerprint (sha256): d9:47:af:82:0b:e4:2d:74:00:a0:35:e2:ec:d0:5e:81:79:f0:1a:3c:a7:29:5c:77:a3:ed:d3:5b:9c:cd:d3:4d

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redirect-letsencrypt4.dealermaster-de.bmw

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirect-letsencrypt4.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autohaus-reier.com
autohaus-reier.de
autohaus-schmauser.de
automobile-goernitz.de
autoschmidt-saarburg.de
berlin.mini
bmw-auto-eichhorn.de
bmw-autohaus-gottstein.de
bmw-autohaus-matthes.de
bmw-bothe.de
bmw-bundk.de
bmw-emmerich.de
bmw-heermann-rhein.de
bmw-kainz.de
bmw-m-suedwest.de
bmw-motorrad-event.de
bmw-reier.de
bmw-rhein-bodensee.de
bmw-rhein-ludwigsburg.de
bmw-schmid-elzach.de
bmw-service-ah-erhardt.de
bmw-service-auto-weiss.de
bmw-service-autohaus-feil.de
bmw-service-autohaus-mm.de
bmw-service-autohausskjellet.de
bmw-service-bothe.de
bmw-service-fetzer.de
bmw-service-fritz.de
bmw-service-goernitz.de
bmw-service-grotewohlt.de
bmw-service-guelke.de
bmw-service-hannemann.de
bmw-service-haupt.de
bmw-service-isernhagen.de
bmw-service-jungmayer.de
bmw-service-knopf.de
bmw-service-langlinderer.de
bmw-service-maier.de
bmw-service-mueller-hollfeld.de
bmw-service-neumeier-seidl.de
bmw-service-raudzus.de
bmw-service-reith.de
bmw-service-riegel.de
bmw-service-rosenkranz.de
bmw-service-schmauser.de
bmw-service-schwarz.de
bmw-service-stahmer.de
bmw-service-tschirley.de
bmw-service-weiss.de
bmw-tief-doerfler.de
bmwserviceschmauser.de
bonn.mini
bremen.mini
chemnitz.mini
darmstadt.mini
dortmund.mini
dresden.mini
duesseldorf.mini
essen.mini
frankfurt.mini
fuchs.bmw
goettingen.mini
hannover.mini
kassel.mini
kellner-service.bmw
mannheim.mini
muenchen.mini
muhra.bmw
nuernberg.mini
redirect-letsencrypt4.dealermaster-de.bmw
reier-berlin.de
reier-oranienburg.de
rhein.bmw
riedel.bmw
saarland.mini
schmauser-service.bmw
seifert-service.bmw
stuttgart.mini
weigl-service.bmw
weiss-bmw.de
www.bmw-schmid-elzach.de

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for redirect-letsencrypt4.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9kgv2sJIyMVRK7XrvSx
6awKuGitkbPdRxP8cpf9JL06vOkZHXJIywUG2KvBQfgYbPRKStX3pmz4kIkNsmMa
2JrvDq1/uEwzgQWWZE3D3nXYpIQCTlRxT5ZnJuHuN5XephUolebn3e74sHVxfp2b
98H4R59GeZCebJdcGpVDDUPZhlfRrWmq5JWVDdRk6+HRom1H97Y8kqKkBAsMN8n1
FD6Ab5nwztvsBDysp/FIl3tW+eTNZTjwelm6xUt1ohHIvkNR0nk+jSKG6YMMO4IE
+buqP2HJ7MaYDIg2uojVbfoHdSVyv8S2wrXMG7r9KOpbdyLFInF0Q8SeRYOxh6FB
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315858967427641918569592068808865095759275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-16 10:43:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-15 10:43:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25733445676405502323441993466325151601323954227349617262580537703525110188525361930466113340045922091882201186935921760691454142250372040020998620610708147111917219344674431616896790851959264924700998051974038352679696340110786897492968612273176906392585015025477592948219551276135280246885410842815904634704643833439106149132586953473605128537906533201940043628848038466722906149922216101384482236131035083715350981488559067353369197855577484913950159874315887969546222966098237520261183026165470616440263128405906046663745160935076216340524362441833528908384669358697117958717225893996667549464828981337075283476757
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5cd78c4cfc89746c47e80bcc7e5008b0d3d3b30a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1703 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlin.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-auto-eichhorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-matthes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bundk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-emmerich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-heermann-rhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-kainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-m-suedwest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-motorrad-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-bodensee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-ludwigsburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-ah-erhardt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-auto-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-feil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-mm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohausskjellet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fetzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fritz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-grotewohlt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-guelke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-hannemann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-haupt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-isernhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-jungmayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-knopf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-langlinderer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-maier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-mueller-hollfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-neumeier-seidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-raudzus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-reith.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-riegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-rosenkranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schwarz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-stahmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-tschirley.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-tief-doerfler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwserviceschmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonn.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bremen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemnitz.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darmstadt.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmund.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresden.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duesseldorf.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchs.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goettingen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannover.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kassel.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellner-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannheim.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muenchen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhra.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuernberg.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-oranienburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhein.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riedel.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saarland.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmauser-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgart.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weigl-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiss-bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ee6b81e500000040300473045022100ce31f3e3073b17747b77ab09e483719f526c18c39937052d78f745198765fc2f022041b81731552a30f87af6ae8ed48215927420e98dc614d1ce388c89aa3611e4c3007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ee6b81e3000000403004730450220744dc453be5f77eb36a905fdae648cce62f249ad2928cd22cc026cd8fff17a99022100cd962e124a3fdba9a786e9c330b5e2832a71a8e6e174e61b793e88f2e3c69012
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0016b3cc7d0dbed6f5a829033df44520019e02cfb187e3636dd5278bed9bb55920e5ad07ffeeac11ede30d71bbc6a6a73019117dc8c20e8201ca82aaa46435d4a77a93b79c6d20ba86c833a0440a3c42bb9de693ddb384f67c3df93fb2cba7de755fe2e2fb6a19333decb59f3c4a7c3083a4a7f3efc64355b4b0acad5882e5242e27d45cf62f6af40a6da074faa91b0b09e33cfa2e620d83cc5a15e12de25624c866bed7fea042b006db084c12e27700cd8e81c0a34fcfd2077fb778af4358204f908297e3320d6c9a64c09b54f1d16b5634ac4153b202976c6002786b0d7aa180733aca252cec0065d82135a465aee6e30776cb55e92d3a02036678b74f44de50