tst.bmw-connecteddrive.com.au

- BMW AG -

Issued by TC TrustCenter Class 2 L1 CA XI

About this certificate

This digital certificate with serial number c5:a4:00:01:00:02:89:f0:f7:55:ef:b8:92:f7 was issued on by TC TrustCenter GmbH.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BMW AG

Organization: BMW AG
Organization unit: PKI Services
State / Province: Bayern
Locality: München
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter Class 2 L1 CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): c5:a4:00:01:00:02:89:f0:f7:55:ef:b8:92:f7
Serial Number (int): 4008628111780691077702052377826039
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId: b2:30:45:36:8e:55:20:5a:8c:e0:2f:a6:6a:0d:10:50:ce:57:59:c1
AuthorityKeyId: 66:b3:c6:91:f9:b6:cd:b2:5f:9a:37:56:46:0c:e2:6b:d5:b1:7c:b4

Fingerprint (sha1): 21:dd:97:16:11:05:2a:d6:42:81:4d:cc:68:c0:16:70:80:c3:9e:6a
Fingerprint (sha256): e9:3f:2f:a0:f6:6c:7b:d4:ec:5a:7c:1c:6a:0b:0e:5e:e9:18:19:fc:a2:90:5a:5f:3b:13:f5:c5:a2:6b:bb:d6

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt

Revocation information

OCSP Server: http://ocsp.xi.tcclass2-ii.trustcenter.de
CRL Distribution Point: http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl
CRL Distribution Point: ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?

Check the revocation status for certificate tst.bmw-connecteddrive.com.au

16

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tst.bmw-connecteddrive.com.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tst.bmw-connecteddrive.com.au
tst.bmw-connecteddrive.com.br
tst.bmw-connecteddrive.fi
tst.bmw-connecteddrive.ie
tst.bmw-connecteddrive.my
tst.bmw-connecteddrive.no
tst.bmw-connecteddrive.sk
tst.bmw-connecteddrive.tw
tst.bmw-i-connecteddrive.com.au
tst.bmw-i-connecteddrive.com.br
tst.bmw-i-connecteddrive.fi
tst.bmw-i-connecteddrive.ie
tst.bmw-i-connecteddrive.my
tst.bmw-i-connecteddrive.no
tst.bmw-i-connecteddrive.sk
tst.bmw-i-connecteddrive.tw
[email protected]

Other certificates including the domain name bmw-connecteddrive.com.au

(limited to 100 certificates)

Certificate

The complete raw certificate details for tst.bmw-connecteddrive.com.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH+TCCBuGgAwIBAgIPAMWkAAEAAonw91XvuJL3MA0GCSqGSIb3DQEBBQUAMHwx
CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMSUwIwYD
VQQLExxUQyBUcnVzdENlbnRlciBDbGFzcyAyIEwxIENBMSgwJgYDVQQDEx9UQyBU
cnVzdENlbnRlciBDbGFzcyAyIEwxIENBIFhJMB4XDTEzMDgwNjA3MzkwN1oXDTE0
MDgwNjA3Mzg1MlowgYExCzAJBgNVBAYTAkRFMQ8wDQYDVQQIEwZCYXllcm4xETAP
BgNVBAcMCE3DvG5jaGVuMQ8wDQYDVQQKEwZCTVcgQUcxFTATBgNVBAsTDFBLSSBT
ZXJ2aWNlczEmMCQGA1UEAxMddHN0LmJtdy1jb25uZWN0ZWRkcml2ZS5jb20uYXUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBSKht3XBFoUaYVsQoq6dz
2pgbmKpN1UJt0TbgSV1gXILwYJAH4lONw3tG0kDX0zbc2FZCofhJHgBDA6BsRwJ5
r430i9btTUd67FaM3lO3+ACKucDj9YkWaL38IiCdeUWe6I0jswxcRapJXMLmXwRO
4KJWD1O5SM8ucmQv7mJSVLtSnMvHbmIP1c9GNq1te5JQhD28xNrpIPxn8IzvkaLA
7+VE2XN8rFOQSHpV10kskM1928D9yt3VYzQjOu5/cNK2bRsbzPL41vDasZinpLtq
0Ufkvr0+fzO/+6HGXRakBVg0qLeDy6Gxmjg88kFSPZ/0dkAirWkcYvV8zrvfJsZv
AgMBAAGjggRwMIIEbDCBmgYIKwYBBQUHAQEEgY0wgYowUQYIKwYBBQUHMAKGRWh0
dHA6Ly93d3cudHJ1c3RjZW50ZXIuZGUvY2VydHNlcnZpY2VzL2NhY2VydHMvdGNf
Y2xhc3MyX0wxX0NBX1hJLmNydDA1BggrBgEFBQcwAYYpaHR0cDovL29jc3AueGku
dGNjbGFzczItaWkudHJ1c3RjZW50ZXIuZGUwHwYDVR0jBBgwFoAUZrPGkfm2zbJf
mjdWRgzia9WxfLQwDAYDVR0TAQH/BAIwADBKBgNVHSAEQzBBMD8GCSqCFAAsAQEB
AjAyMDAGCCsGAQUFBwIBFiRodHRwOi8vd3d3LnRydXN0Y2VudGVyLmRlL2d1aWRl
bGluZXMwDgYDVR0PAQH/BAQDAgTwMB0GA1UdDgQWBBSyMEU2jlUgWozgL6ZqDRBQ
zldZwTCB+gYDVR0fBIHyMIHvMIHsoIHpoIHmhkZodHRwOi8vY3JsLnhpLnRjY2xh
c3MyLWlpLnRydXN0Y2VudGVyLmRlL2NybC92Mi90Y19jbGFzczJfTDFfQ0FfWEku
Y3JshoGbbGRhcDovL3d3dy50cnVzdGNlbnRlci5kZS9DTj1UQyUyMFRydXN0Q2Vu
dGVyJTIwQ2xhc3MlMjAyJTIwTDElMjBDQSUyMFhJLE89VEMlMjBUcnVzdENlbnRl
cixPVT1jYWNlcnRzLERDPXRydXN0Y2VudGVyLERDPWRlP2NlcnRpZmljYXRlUmV2
b2NhdGlvbkxpc3Q/YmFzZT8wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MBEGCWCGSAGG+EIBAQQEAwIGwDCCAfIGA1UdEQSCAekwggHlgRNpdHBzLnNzbGNl
cnRAYm13LmRlgh10c3QuYm13LWNvbm5lY3RlZGRyaXZlLmNvbS5hdYIddHN0LmJt
dy1jb25uZWN0ZWRkcml2ZS5jb20uYnKCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUu
ZmmCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUuaWWCGXRzdC5ibXctY29ubmVjdGVk
ZHJpdmUubXmCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUubm+CGXRzdC5ibXctY29u
bmVjdGVkZHJpdmUuc2uCGXRzdC5ibXctY29ubmVjdGVkZHJpdmUudHeCH3RzdC5i
bXctaS1jb25uZWN0ZWRkcml2ZS5jb20uYXWCH3RzdC5ibXctaS1jb25uZWN0ZWRk
cml2ZS5jb20uYnKCG3RzdC5ibXctaS1jb25uZWN0ZWRkcml2ZS5maYIbdHN0LmJt
dy1pLWNvbm5lY3RlZGRyaXZlLmllght0c3QuYm13LWktY29ubmVjdGVkZHJpdmUu
bXmCG3RzdC5ibXctaS1jb25uZWN0ZWRkcml2ZS5ub4IbdHN0LmJtdy1pLWNvbm5l
Y3RlZGRyaXZlLnNrght0c3QuYm13LWktY29ubmVjdGVkZHJpdmUudHcwDQYJKoZI
hvcNAQEFBQADggEBAKR2VIFcEzvBfqY3rpdmI/RYVR2kulGJYgzzc0eCY3rIXoV/
1gYClXRvMyjlpHRb9J+Q9ty0xFEtCQuMR5X1v2jcEYAabt4AvD2YNlPMjmUN/Kwo
c/OfBuaJk7jNZrOP0gsjjcV+GH63vonyjGp7U9CmPzz2+ZdNJz8AK8tJAEQFuinG
Z4EXdm5uoHcBlBxjeKPFN8ZKzjZaiTNs83AH5C+HbqO777v1xbNTKXWSwYr1UNG4
6mGpXNx8zdGEQYaqCLlQ2NtzVCoeD2g6bXdLT+J7M6QLMFkGoEKMDBB9U5LCMIrC
6VywsGuGUWxOE+oJt4c1mz6i4db2pzWXnaunysw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUiobd1wRaFGmFbEKKun
c9qYG5iqTdVCbdE24EldYFyC8GCQB+JTjcN7RtJA19M23NhWQqH4SR4AQwOgbEcC
ea+N9IvW7U1HeuxWjN5Tt/gAirnA4/WJFmi9/CIgnXlFnuiNI7MMXEWqSVzC5l8E
TuCiVg9TuUjPLnJkL+5iUlS7UpzLx25iD9XPRjatbXuSUIQ9vMTa6SD8Z/CM75Gi
wO/lRNlzfKxTkEh6VddJLJDNfdvA/crd1WM0Izruf3DStm0bG8zy+Nbw2rGYp6S7
atFH5L69Pn8zv/uhxl0WpAVYNKi3g8uhsZo4PPJBUj2f9HZAIq1pHGL1fM673ybG
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4008628111780691077702052377826039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter Class 2 L1 CA XI'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-08-06 07:39:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-08-06 07:38:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'München'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BMW AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PKI Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tst.bmw-connecteddrive.com.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24399821817324079193454592428458270622415107211224322799303540881586432433029758890687305856815317157749801905772614280572917128859546698910090562744360928577316598782971994405745958022233129387163286858945204065916727188783228888030027792428627911734498271477147367308240443366030029462184160374046474348561344169232693803396619474283246385262931712315038115211632053563648162139275224708534068695069693519376244448900174935441133490701499439369196401240452107766869047951327709233728404148720320420105459941242129890464216823282742547399967587612698496121029369761269265141440861344130318875716305654818774771484271
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_class2_L1_CA_XI.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.xi.tcclass2-ii.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 66b3c691f9b6cdb25f9a3756460ce26bd5b17cb4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b23045368e55205a8ce02fa66a0d1050ce5759c1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.xi.tcclass2-ii.trustcenter.de/crl/v2/tc_class2_L1_CA_XI.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://www.trustcenter.de/CN=TC%20TrustCenter%20Class%202%20L1%20CA%20XI,O=TC%20TrustCenter,OU=cacerts,DC=trustcenter,DC=de?certificateRevocationList?base?'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-connecteddrive.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tst.bmw-i-connecteddrive.tw'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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