www.cdupdate.brandweb.basf.com

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 20:fd:ce:89:e3:cf:45:34:b9:ff:b5:10 was issued on by GlobalSign nv-sa.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:fd:ce:89:e3:cf:45:34:b9:ff:b5:10
Serial Number (int): 10210353897760367885066155280
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 7a:97:a8:22:3d:dc:98:69:1c:c9:33:4b:b3:3e:b8:8e:9f:52:76:60
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): be:de:9a:6f:fb:a4:16:4e:89:fc:47:3a:46:8a:9f:94:68:e9:67:cf
Fingerprint (sha256): 02:11:8e:05:ac:ee:8a:53:9b:74:80:84:22:1a:d3:98:e3:27:39:2a:21:78:95:79:0e:8c:70:d8:9c:89:1c:c3

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.cdupdate.brandweb.basf.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cdupdate.brandweb.basf.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cdupdate.brandweb.basf.com
fepwaf30.basf.com
cdupdate.brandweb.basf.com

Other certificates including the domain name basf.com

(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
zrm.basf.com
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net
customer-centricity-solution-qa.basf.com
insights.basf.com
elfis.basf.com
vm-feedback.basf.com
voffice-partners.basf.com

Certificate

The complete raw certificate details for www.cdupdate.brandweb.basf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHejCCBmKgAwIBAgIMIP3OiePPRTS5/7UQMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA4MTkxMjUxMDFaFw0y
MDA4MTkxMjUxMDFaMIGXMQswCQYDVQQGEwJERTEMMAoGA1UECBMDUkxQMRUwEwYD
VQQHEwxMdWR3aWdzaGFmZW4xFDASBgNVBAsTC0lUIFNlY3VyaXR5MSQwIgYDVQQK
ExtCQVNGIEJ1c2luZXNzIFNlcnZpY2VzIEdtYkgxJzAlBgNVBAMTHnd3dy5jZHVw
ZGF0ZS5icmFuZHdlYi5iYXNmLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCC
AgoCggIBAKt+DUBB6dW4eEr3U3hCXJTZaX33dO5jEkB4cRcrdBMFJMBqNcRndKjP
Ty3OkHsDuG45czGeijxNwGocwp0JjsTovi5y2De9bgLuEs4sZKG3TALO8FJALDT/
MZu8J+MDd6xzt0lVWqV4XSJX11m1gSifI78+SVINEt/Myvcs3YiHisJB0lZdIIL0
HycPrau5bGEbkyf5BANaXEv5HBEkvHIT+Vp8m96W+gyWESb4Ixtu4mbDayD4CqsA
gDwPM8RUGSUZdYY/zX+rvw6wdZCsWe+uLgNQZE+3ca8wR2H1eJ/zkaV3PHX/BwlE
BknGnueCTq3zyDgg1/NYzPaYs3OdaZqyLoyrNzRHe6ehCpFxLTh8eYJSdtgzuyPf
LqYA1NJXoFySMfoKEosqyvSCx+gMn9hhQoEnPUuv9z+Qbc+/O4ft2c7D4dWzH9+C
ppNDNX1eC9UuV/jfmihRT9p+ROl2E1jfU3JsEpzqvkkUT6ekkVTL/M3lHW1kpIzK
i3F2UN4GMSpLJ2lgFCdjpF+BfP3v/LMYJG7Y3nxlEbHTyR/83l454/ity5wz50FP
wrsU7lyqm4oKrbUMbFIl2CP3YS3RWWV/XY0vU5I9vfuSFpqVpcqWBnZEciM5lipv
zwcV5gnUSROG80+3u6pKxgjV3nieDtzYlTuDHL5aP9P+NXLBRrxNAgMBAAGjggMK
MIIDBjAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYBBQUH
MAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNhb3Zz
c2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxzaWdu
LmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQw
MgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRv
cnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwWAYDVR0R
BFEwT4Ied3d3LmNkdXBkYXRlLmJyYW5kd2ViLmJhc2YuY29tghFmZXB3YWYzMC5i
YXNmLmNvbYIaY2R1cGRhdGUuYnJhbmR3ZWIuYmFzZi5jb20wHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcD
ArPrMB0GA1UdDgQWBBR6l6giPdyYaRzJM0uzPriOn1J2YDCCAQQGCisGAQQB1nkC
BAIEgfUEgfIA8AB2AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaNsgiaN9kTAAAB
bKnuT3IAAAQDAEcwRQIhAOGrg92LZFQMnc1Z9vkUpkLVTnUir5a6ocaq4z7zUVaE
AiBSXYOFmIDTGx7RFAyfA1pzrb+4IYxCdsg0+aDxp7A9zAB2AO5Lvbd1zmC64UJp
H6vhnmajD35fsHLYgwDEe4l6qP3LAAABbKnuTxcAAAQDAEcwRQIhAOFeSAcsRC3t
yZIDOKPB1f5yuWGy33rGAX6KyJaqd7cYAiA1WKr7d0cRrgrijg2xG0WzdxCm99mu
w6YEzCzfhLxPRDANBgkqhkiG9w0BAQsFAAOCAQEApsawZa2rXrmraS2Ig+t0Xx7x
TVZXPgLnGmhyP4RAnP9BZIn5pRvKHFSkm6xzIkX6RtZbRw2j+2BbMPJk9syGAem0
VltiRf+4rwgtts3IigwvRLbf1mRvw0URJCdngP6gmvTbGE6cnhcEv/LBgjv5UaRA
VdZJJdrZf96Eq5zdE7H0FkoLkHoconUiYukbYoKHUWxd5hphdr4hpXO5pkXhGXE5
okOI2qIDL7yFNr9ldQS+clw4gE4DVGl+rD67z4dfAgE3nE8jElqBCZkxrQIgqi3M
3dA03HFnMUo/AWtJ1Hnd9kkb1s4poD61mTIDfKBhxblhkfuL7x8WrU0CGnjemA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10210353897760367885066155280
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 12:51:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-19 12:51:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cdupdate.brandweb.basf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 699627910326954056949496709252026742304609267801030931478821899845498801793389419522258568073917897701925314236326071578279808379546626174848892432585883181547780530901664764318950793989452255714286004769686431726356186098919293646075568229190599917977151658954866546312879378994162254853118589683818747504875963429786072291509141862381671638146880739257642340715322052791352274473068260715173241814839188861828804820508252309962128078821022931882241170115761987116297097951472990636312745527481691543846811446090006092886382587726645298991997629294319688001534086127928665331563003211827033202156833558069879998800161156614764412988313311918982305391469422592810500348462458244561056363671610331570949073555300909604273281278791073939576923489993372106362602239912761689257565842187639686713800144678812885207278706892932075394595638268569710071099581126498661780260783779499592761356516456699033924442449552593308657713121523142855701753049101418769591940892115349965887446085924314444110452531224889262820062985918983530167487383156551150805161797386806150183822847221883372641982722985419657361838996244044584462812625219764454332553588474853065742616400080811737608297684245970199162873717460807011684857041476823861469651582029
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdupdate.brandweb.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fepwaf30.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdupdate.brandweb.basf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a97a8223ddc98691cc9334bb33eb88e9f527660
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ca9ee4f720000040300473045022100e1ab83dd8b64540c9dcd59f6f914a642d54e7522af96baa1c6aae33ef35156840220525d83859880d31b1ed1140c9f035a73adbfb8218c4276c834f9a0f1a7b03dcc007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016ca9ee4f170000040300473045022100e15e48072c442dedc9920338a3c1d5fe72b961b2df7ac6017e8ac896aa77b71802203558aafb774711ae0ae28e0db11b45b37710a6f7d9aec3a604cc2cdf84bc4f44
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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