www-origin.bmw-int7.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3d:5c:b5:98:ee:6f:58:ce:dd:06:61:50 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3d:5c:b5:98:ee:6f:58:ce:dd:06:61:50
Serial Number (int): 18990664343926142434856558928
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 13:47:48:db:52:6b:c4:03:5f:7b:1a:f2:9b:7f:0f:1e:1e:5e:90:7d
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 0b:1d:06:d8:f4:8f:af:16:56:ab:cd:d6:eb:57:c2:7e:78:a4:ef:e6
Fingerprint (sha256): f6:75:84:96:67:07:fb:b5:1a:ea:de:da:14:9b:1e:cd:81:8d:91:6c:98:d6:d2:9c:91:01:f6:e1:52:a0:51:18

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www-origin.bmw-int7.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-origin.bmw-int7.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-origin.bmw-int7.com

Other certificates including the domain name bmw-int7.com

(limited to 100 certificates)
www.mini.rs
www.mini.rs
www.mini.rs
www.mini.rs
www-origin.bmw-int7.com
www.bmwlat.com
www.mini.rs
www-origin.bmw-int7.com
core.bmw-int7.com
www.bmwlat.com
www.bmwlat.com
www.m1.bmw-int7.com
www.mini.rs
core.bmw-int7.com
www.mini.rs
www.mini.rs
www.bmwlat.com
www.mini.rs
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.m1.bmw-int7.com
core.bmw-int7.com
www.mini.rs
www.m1.bmw-int7.com
www.m1.bmw-int7.com
www.mini.rs
www.mini.rs
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.mini.rs
www.mini.rs
www.bmwlat.com
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.mini.rs
www.bmwlat.com
www-origin.bmw-int7.com
www-origin.bmw-int7.com
bmw-int1.com
www.mini.rs
www.m1.bmw-int7.com
core.bmw-int7.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www-origin.bmw-int7.com
www.bmwlat.com
www.m1.bmw-int7.com
www.m1.bmw-int7.com
www.mini.rs
www.m1.bmw-int7.com
www.mini.rs
bmw-int1.com
www.mini.rs
www.bmwlat.com
www.mini.rs
www.mini.rs
www.bmwlat.com
www.m1.bmw-int7.com
www.bmwlat.com
www.m1.bmw-int7.com
www.mini.rs
www.m1.bmw-int7.com
www-origin.bmw-int7.com
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.bmwlat.com
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.mini.rs
www-origin.bmw-int7.com
www.mini.rs
www.m1.bmw-int7.com
www.mini.rs
core.bmw-int7.com
www.m1.bmw-int7.com
www.bmwlat.com
www.m1.bmw-int7.com
www.m1.bmw-int7.com
core.bmw-int7.com
www.mini.rs
www.mini.rs
core.bmw-int7.com
www.mini.rs
www.mini.rs
www.m1.bmw-int7.com
www.m1.bmw-int7.com
www-origin.bmw-int7.com
bmw-int1.com
www.mini.rs
www.mini.rs
www.mini.rs
www.bmwlat.com

Certificate

The complete raw certificate details for www-origin.bmw-int7.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBLR6K9bowFz6elFIlsQ
e+HDG1t+5Mwjg3xJ10YQHOpjiXAI5uyGeujYZpuXzf5AimQdIcvoUE86nM2+VPWn
c8moZ26cB8J4FDchgrTY5JJ48uXylJv+AtFBSmxd9WTYzVjfwCzUL61seM856IJm
XcTcOpTVir0dYMo779GdWk8wr35zpQHawGQhp098j98bDWlT+NG3Uvno3YdCJ8P3
0L3vqDsS60FsM3pkG/eXACaXPbJf0Q1pxJKywWrSQaHL7Gb2gKG+4u0Wj/THmyGy
pQewA5+eum1Cz0XahPwthgsHKOseBxqgOiDyu+C0lJWXFPu6+ho/kzOf74YLUfKr
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18990664343926142434856558928
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-13 18:31:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-03 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-origin.bmw-int7.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23237128580311603088712712165504991085677668166100498359533986158821768943725364850524546712131570997981125392382011023063774055708181852953569328302655125782912159369145996231447350337337733254631305316002907898375998913616145964534611147096354622887164746652536573112080941738889876134536553676480917824016810203394624686280924043950985809017831941192307181005849294193411863159163825715646227003626968324934118360257713239729399577008121509018722037272793930592436225308019527204036989914697386265303742860673735220982395445001370750867779013456391566746244920971208188899782552959361593728610044394717581560425397
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-origin.bmw-int7.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							134748db526bc4035f7b1af29b7f0f1e1e5e907d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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