efficiency.glasurit.com

- BASF Business Services GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 29:0b:42:de:73:84:91:82:b4:20:87:12 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 29:0b:42:de:73:84:91:82:b4:20:87:12
Serial Number (int): 12702499366379900500583679762
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: b9:27:1c:7f:98:c7:e9:67:22:53:13:cf:36:0d:ec:3e:7e:c3:ed:ad
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2f:cf:03:7e:7f:22:09:27:95:44:f4:c1:81:dc:02:4a:88:0e:c9:b2
Fingerprint (sha256): 0c:72:5e:e9:0b:97:66:db:3d:7e:c4:9f:96:83:7f:78:8a:74:5e:a3:ed:47:ef:9f:97:75:3b:f6:5f:1f:1f:ea

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate efficiency.glasurit.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for efficiency.glasurit.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

efficiency.glasurit.com

Other certificates including the domain name glasurit.com

(limited to 100 certificates)
www.promoshop.glasurit.com
colormotion.glasurit.com
www.promoshop.glasurit.com
msds-prod.baslac.com
www.glasurit.com
www.promoshop.glasurit.com
msds.baslac.com
test-knowhow.glasurit.com
comlib.glasurit.com
efficiency.glasurit.com
www.glasurit.com
knowhow.glasurit.com
color-explorer-test.rmpaint.com
www.findadblue.de
msds-prod.baslac.com
colormotion.de
cdi.glasurit.com
colormotion.glasurit.com
www.glasurit.com
www.promoshop.glasurit.com
glasurit.com
storybook.glasurit.com
knowhow.glasurit.com
www.promoshop.glasurit.com
comlib.glasurit.com
rep.basf.com
refinity.basf.com
basf-cis.com
techinfo.baslac.com
colormotion.de
colormotion.glasurit.com
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
efficiency.glasurit.com
agro.news
www.promoshop.glasurit.com
techinfo.baslac.com
ton-schaum.net
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
efficiency.glasurit.com
cdi.glasurit.com
knowhow.glasurit.com
color-online.glasurit.com
ecobalance.glasurit.com
100line.glasurit.com
glasurit.com
*.basf.com
glasurit.com
test-knowhow.glasurit.com
perform100.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
agro.news
ar.glasurit.com
*.basf.com
color-explorer-test.rmpaint.com
agro.news
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
www.promoshop.glasurit.com
knowhow.glasurit.com
www.glasurit.com
color-online.glasurit.com
agro.news
www.glasurit.com
color-explorer-prod.rmpaint.com
efficiency.glasurit.com
agro.news
comlib.glasurit.com
www.concept1865.info
www.promoshop.glasurit.com
color-online.glasurit.com
www.promoshop.glasurit.com
colormotion.glasurit.com
www.promoshop.glasurit.com
efficiency.glasurit.com
colormotion.glasurit.com
techinfo-test.baslac.com
comlib.glasurit.com
www.concept1865.info
*.100line.glasurit.com
comlib.glasurit.com
color-explorer-test.rmpaint.com
glasurit.com
colormotion.de
knowhow.glasurit.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.findadblue.de
www.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
knowhow.glasurit.com
msds.baslac.com

Certificate

The complete raw certificate details for efficiency.glasurit.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5xOuDD9K3ZWxTSs+3/8J
9ZZI/iJ8Ls/XGaa4gFr+84AK9vPH1fCVB7fFUs1KpGRp9/wAISfCKVrZvLoKKSTb
qZ3GvqA7gYq+0zDEpOJSjdk68IMvpBrFOvc0pX2x8g4Mhk9cALpzwSFUJZVsdg6S
WNre+pV+5cDbzYqmWBaepZ2XhEKouVVNCaAB7aGt8KDqOH3RwikfLYXQcxl1EF0N
JyBy7nkjx2DySfbprpFpb+KzNJWLl5w5AKrdcge6mfhnyVqy7QznL1vW5NnIrzgE
bmJSqSrtU5+lHaU4bGpFPbX39fax20UK1dp7az+3t3xVly6F+TlZkiW7mtLJauku
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12702499366379900500583679762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-08 12:00:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 13:31:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'efficiency.glasurit.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29170752954907286759114019847840860913954901181655227043153544300747836044104193306674666098705255632137929516550058396824127764313864264740312471967597287482771129972345381812013694600273537272155152065581261118955488439418483642268568951000771273014290408875860411345753230124928246106971794133765926478748784570358882026479610818780893337415496971120441183441386701093398194677494600664069244527656526994754258829192085388489169920413209990854652000664607601814461698894628850362373292782839829646836046652507229807502837652408200382441797417164882659662184429595099741605841817515283847192949762497346663566880487
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'efficiency.glasurit.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b9271c7f98c7e967225313cf360dec3e7ec3edad
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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