crm.agro.basf.us

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:d9:0c:f6:88:79:fc:22:d7:19:d1:9d:2e:11:d4:61 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=crm.agro.basf.us

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:d9:0c:f6:88:79:fc:22:d7:19:d1:9d:2e:11:d4:61
Serial Number (int): 2456219335367627836285991341561861217
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 26:6d:52:0f:43:bb:29:a9:7b:7b:a1:56:9d:c9:26:ba:6f:8c:62:f7
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 18:a6:7c:a6:e4:bb:4b:97:fa:87:f7:94:1c:de:ec:1d:8a:64:bb:e9
Fingerprint (sha256): 07:fa:5e:85:e1:30:34:b5:3a:29:64:1b:fa:40:40:b1:ca:f0:f8:55:b2:bb:b5:7f:4f:8d:ac:f6:c1:3f:85:9d

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate crm.agro.basf.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for crm.agro.basf.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

crm.agro.basf.us

Other certificates including the domain name basf.us

(limited to 100 certificates)
www.bodyshopmall.com
estore.refinish.basf.us
mcyclo.com
readz.com
jobpostings.basf.us
voffice-na.basf.com
www.engenia-herbicide.basf.us
mcyclo.com
master-builders-solutions.basf.pl
jobpostings.basf.us
readz.com
refinish-elearning.basf.us
construction-chemicals-documents.basf.us
crm.agro.basf.us
www.hydrosulphite.com
veterans-jobs.basf.us
teraxxa-wins.com
webmail.basf.us
construction-chemicals-documents.basf.us
readz.com
master-builders-solutions.basf.pl
readz.com
experience-stage.basf.com
dispersions-resins-distributors.basf.us
acronaloptive.com
invigorresults.ca
www2.refinish.basf.us
www.ornamentals.basf.com
agcelence.lv
veterans-jobs.basf.us
experience.basf.com
neopor.basf.us
www.hydrosulphite.com
headline-advantage-terms.basf.us
refinish-elearning.basf.us
betterturf-stage.basf.us
*.basf.us
readz.com
experience-stage.basf.com
experience-stage02.basf.com
jobpostings.basf.us
agcelence.lv
construction-chemicals-documents.basf.us
master-builders-solutions.basf.pl
construction-chemicals-documents.basf.us
readz.com
africa.master-builders-solutions.basf.com
mcyclo.com
master-builders-solutions.basf.pl
www.bodyshopmall.com
readz.com
readz.com
readz.com
construction-chemicals-documents.basf.us
carecreations.basf.us
africa.master-builders-solutions.basf.com
www.hydrosulphite.com
readz.com
readz.com
carecreations.basf.us
certainweedcontrol.com
www.basf-wohnen-und-bauen.com
jobpostings.basf.us
b2last.basf.com
betterturf.basf.us
readz.com
readz.com
wireandcable.basf.com
experience.basf.com
readz.com
www.growsmartcanola.com
veterans-jobs.basf.us
readz.com
crm-int.agro.basf.us
readz.com
if.basf.us
betterturf.basf.us
dispersions-resins-distributors.basf.us
readz.com
voffice-na.basf.com
crm-int.agro.basf.us
www.basf.us
refinish.basf.us
agcelence.lv
www.lupraphen.com
teraxxa-wins.com
readz.com
*.basf.us
veterans-jobs.basf.us
readz.com
readz.com
www.omacor.org
whatwedo.basf.us
mcyclo.com
www.ornamentals.basf.com
master-builders-solutions.basf.pl
www.hydrosulphite.com
africa.master-builders-solutions.basf.com
dev.events.basf.us
www.abacustica.de

Certificate

The complete raw certificate details for crm.agro.basf.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/tZEbl8NSWC9kXSv/6cc
l/pQ+I3YlWol6Ssixi/80pT6MPdB/af4kWLIbAqZrPIknATUjABgKAgizqDcDPVr
gVyoSisH53CEr93AetXOi9ixKori+BKLurZFV6sL78Om7UZMav/lwQqplvF72T95
SiLBukAfupMECDZO/JEDa4AREU0OVhnrCMuXpgDJyLDn+2actrc4GXj45ZeczAw7
/haulMTO1ij5a6WYfIjFZJOvT8ACsJfWhPcAEugFdDAZoJy1SwAbG5oyZRy8ZD88
AhynkEy/BFzpQ5BpGmIrxwI0kKAy1vcjB7opgqOaDmNAB4ZDQREHUDrBcACBna07
/wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2456219335367627836285991341561861217
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crm.agro.basf.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32170188609482421471277500007656534755110752873482358894063265133817720230579825938616556499886239569050489699967278171336585125690409239720959838524943493687627572946141269027408733042624757377653766949956132502079614159678137077061323942386574985243002977034911942094458680669900950293808806980875967157572319898690249019894455702800163324203722530830802708828376359950942199880724183092654603527098394351385735866423018307805798840631197993866452725563976292656985043961618242989905134822314685668301982613551137227365333549546465278027060422380976994140303640952768134895832375139209771697067088231062851734551551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							266d520f43bb29a97b7ba1569dc926ba6f8c62f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.agro.basf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043ceb8c6a32a618da106c51d3d0c9afeb7a6d29471c998701ae09e12977f024a2e855e033a6ff687291a2fb072c36d8975d82070d846ff1025db4b640b34090312fa388b9617132bfe995fe79a5b723932bb12031dbfe111dca73e2e1a45780c4d9fbce2f3349b6753694c74d1f5933dc6f755088ce08b5a35fc6bcb4f63e111c215298f80a102897858b51bc076830bf7d3fbc9967f4e0234e5ee493f18e54b228c32d11a0d0c0ed3016e2eb578a045aae4b2eada611bef5badb8a0f41cf2371f4eba33b57d8afb4a2239892e2af541a369209848cc08552098551f64f86c7dff11bdd6ca3456ab096286a4e16de542db7745bdcb3fb7c5ec4326a265c82a35