redirect-letsencrypt4.dealermaster-de.bmw

Issued by R3

About this certificate

This digital certificate with serial number 04:86:ec:ce:bf:1f:b2:8f:42:4b:fa:bd:64:c7:b1:f6:e8:bd was issued on by Let's Encrypt.

With 83 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=redirect-letsencrypt4.dealermaster-de.bmw

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:86:ec:ce:bf:1f:b2:8f:42:4b:fa:bd:64:c7:b1:f6:e8:bd
Serial Number (int): 394361752191056407867713982291001149417661
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d4:04:65:fa:2a:95:ea:f3:9a:1c:18:79:e4:20:30:92:d2:c5:6e:0b
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): f2:43:76:f3:37:19:51:6f:74:e3:b6:3b:a1:62:83:6f:4a:e7:6a:04
Fingerprint (sha256): e5:a9:1b:0d:06:5f:2d:55:36:9a:da:27:76:50:41:8d:c6:42:db:24:52:53:b8:18:83:42:af:d2:da:58:60:22

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate redirect-letsencrypt4.dealermaster-de.bmw

83

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for redirect-letsencrypt4.dealermaster-de.bmw

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

autohaus-reier.com
autohaus-reier.de
autohaus-schmauser.de
automobile-goernitz.de
autoschmidt-saarburg.de
berlin.mini
bmw-auto-eichhorn.de
bmw-autohaus-gottstein.de
bmw-autohaus-matthes.de
bmw-bothe.de
bmw-bundk.de
bmw-emmerich.de
bmw-heermann-rhein.de
bmw-kainz.de
bmw-m-suedwest.de
bmw-motorrad-event.de
bmw-reier.de
bmw-rhein-bodensee.de
bmw-rhein-ludwigsburg.de
bmw-schmid-elzach.de
bmw-service-ah-erhardt.de
bmw-service-auto-weiss.de
bmw-service-autohaus-feil.de
bmw-service-autohaus-mm.de
bmw-service-autohausskjellet.de
bmw-service-bothe.de
bmw-service-fetzer.de
bmw-service-fritz.de
bmw-service-goernitz.de
bmw-service-grotewohlt.de
bmw-service-guelke.de
bmw-service-hannemann.de
bmw-service-haupt.de
bmw-service-isernhagen.de
bmw-service-jungmayer.de
bmw-service-knopf.de
bmw-service-langlinderer.de
bmw-service-maier.de
bmw-service-mueller-hollfeld.de
bmw-service-neumeier-seidl.de
bmw-service-raudzus.de
bmw-service-reith.de
bmw-service-riegel.de
bmw-service-rosenkranz.de
bmw-service-schmauser.de
bmw-service-schwarz.de
bmw-service-stahmer.de
bmw-service-tschirley.de
bmw-service-weiss.de
bmw-tief-doerfler.de
bmwserviceschmauser.de
bonn.mini
bremen.mini
chemnitz.mini
darmstadt.mini
dortmund.mini
dresden.mini
duesseldorf.mini
essen.mini
frankfurt.mini
fuchs.bmw
goettingen.mini
hamburg.mini
hannover.mini
kassel.mini
kellner-service.bmw
mannheim.mini
muenchen.mini
muhra.bmw
niederlassungen.mini
nuernberg.mini
redirect-letsencrypt4.dealermaster-de.bmw
reier-berlin.de
reier-oranienburg.de
rhein.bmw
riedel.bmw
saarland.mini
schmauser-service.bmw
seifert-service.bmw
stuttgart.mini
weigl-service.bmw
weiss-bmw.de
www.bmw-schmid-elzach.de

Other certificates including the domain name dealermaster-de.bmw

(limited to 100 certificates)
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
formulare.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
mini-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-retail-ebooks.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-dev.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
cosy-configurator.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
bmw-muenchen-motorrad-rundgang.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
mini-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
bmw-motorrad-vorteilsrechner.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
integration.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
alb-prod.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
redirect-letsencrypt4.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw
redirect-letsencrypt2.dealermaster-de.bmw
bmw-stuttgart-rundgang.dealermaster-de.bmw
redirect-letsencrypt3.dealermaster-de.bmw
redirect-letsencrypt1.dealermaster-de.bmw

Certificate

The complete raw certificate details for redirect-letsencrypt4.dealermaster-de.bmw in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwkB2vlYOdtP44AS81J5V
GeSuod3/mRPO1TSF45XcODkGVWiT6mtVt/IJuJX4pbtV68xg4l8/WBfXo6xqFaA8
WD9f7uDZRrRHeI9eWrfKpsr6ijTCWpPHmL/naVw5aA71n4JqTaavBtU63b61lX2d
I7MdFmugi1ElZ4yW5EnOtfJIOUBWIBYKcPK9FSO4DGw3EBMhE/byy/J9jBMwGMHp
KM6kaQgLmd70w58D/nkc+scAi9t3BN9y4aceW0VKZrC00UitMtmy9jVJqQjioCm2
s1qIJCGWuzzuBllwxumZESsT9YRZcXtOAMUasyEcVG0UI2yG1YmB1ZPkPkyUQV2B
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 394361752191056407867713982291001149417661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 11:07:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-18 11:07:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24522019468572960241610910497698695125020036236228202354507126177397131313974858039915774721836434174722916528609184854626628596371549930466461035064462864336006934891492882402674950316151130419429921412028461316279830465218563754676598385940034140515087515109465244666563930829115038733026382909230063293488404321527200659001979704623043724631494261506948672921928041571066637131820939898649920143321903545310732489731727725691829228597902870018274589468361014467134117095361147574482774992406941854526212630174833959607371508610703895951317916972504547366664532536807823409559626376028684213849474728557669695455621
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d40465fa2a95eaf39a1c1879e4203092d2c56e0b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1739 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autohaus-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'automobile-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoschmidt-saarburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berlin.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-auto-eichhorn.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-gottstein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-autohaus-matthes.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-bundk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-emmerich.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-heermann-rhein.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-kainz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-m-suedwest.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-motorrad-event.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-reier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-bodensee.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-rhein-ludwigsburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-ah-erhardt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-auto-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-feil.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohaus-mm.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-autohausskjellet.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-bothe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fetzer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-fritz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-goernitz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-grotewohlt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-guelke.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-hannemann.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-haupt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-isernhagen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-jungmayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-knopf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-langlinderer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-maier.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-mueller-hollfeld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-neumeier-seidl.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-raudzus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-reith.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-riegel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-rosenkranz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-schwarz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-stahmer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-tschirley.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-service-weiss.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmw-tief-doerfler.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwserviceschmauser.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonn.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bremen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chemnitz.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'darmstadt.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dortmund.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dresden.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'duesseldorf.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'essen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfurt.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fuchs.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goettingen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hamburg.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hannover.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kassel.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kellner-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mannheim.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muenchen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'muhra.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'niederlassungen.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nuernberg.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect-letsencrypt4.dealermaster-de.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-berlin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reier-oranienburg.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhein.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riedel.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saarland.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schmauser-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seifert-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stuttgart.mini'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weigl-service.bmw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weiss-bmw.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-schmid-elzach.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077001998107109f0d6522e3080d29e3f64bb836e28ccf90f528eeedfce4a3f16b4ca0000018ef64122ac0000040300483046022100fc6079c872c6d78246d637bc02951d8cba3b72498246e044c5faec6bf7515ab502210084f3e259391d5824b7af32c67b10c1e643441fa0f635c9937c7d9b114827b21600750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ef64122b5000004030046304402207b142a5e15dd8edad55209d4cdc41ec6b490a81f39e309c81e3a5a6b51ee9cff022025602219ac1acfee0c027e2cc75d3ebd222709e8a8ea21234b9a236d3ecccc29
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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