www.wirtschaftsbetriebe.basf.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:2f:e9:3b:3c:0e:cc:b4:f1:2f:b3:b7:99:23:82:8b:bd:4c was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wirtschaftsbetriebe.basf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:2f:e9:3b:3c:0e:cc:b4:f1:2f:b3:b7:99:23:82:8b:bd:4c
Serial Number (int): 364752432658974757504412155424848659332428
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 14:ee:a7:7c:e0:f6:61:3e:1c:07:96:71:4f:8a:92:c5:b6:5e:92:07
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 1b:a0:d0:7b:f1:69:a1:d9:49:bf:f7:58:94:b8:d3:b8:75:7e:3c:b0
Fingerprint (sha256): 0f:89:bb:4e:77:ca:94:8d:9f:4b:91:2d:9c:f8:cc:87:b1:5a:9d:4f:2c:22:0d:d7:5a:7d:93:8a:8d:c1:71:19

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wirtschaftsbetriebe.basf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wirtschaftsbetriebe.basf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wirtschaftsbetriebe.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www.wirtschaftsbetriebe.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0RuNn4H0a0uYtEqZs5Jb
j6lMIDlWoY2REWZ6UDk0aOHrH3B1o0MSSYKJ6A7LJTdAUq6pugcS9bfCfEwGF1es
Al8GnAc7SJEct9gJEJkI/wZQngBeZGs26XFHyK3wJfsLXViOd6+q/YFNmDo1+lal
L5zAaD4i4yW8Hbx52QnxhbOF/B9EduId726Wr5XgOa0pXe0Oj+UKe+QdDEqKzZto
RZNgCInRN/AO4182a3pVsQyWvwTKegHUG85xxVgmszTQeBVBHW9tnqvX/5Tsc1BH
J/ASR7h9KuHosOLEIqVta5/p67HGtESgr1/ZubudWaAN2OTlNP26xcksGJxIJJmB
U5MMtTfgP7QRuorDscF3LzrJXxwgOq/x7FbeWCcsYawUG0qSSiPpcLjHSoFvTLaA
QgBoZAnv26StywzD9OaJ3cdtedfRtmVUfv75yuG1ZrDpvEDxMkAl9d6di0yKrpn3
gOx+lSpkjqQeog0bdLem5T5XP44EaH+wcoupPQkJP3OUUY5j45ME1kXSyIWj+J1F
DBu17OqAccu/4BPQde47jSIokSGZmaAC1xB9M/GIXdrdSGT0Dj2fI9x+LyV8DPzf
BlVkf7T9OMvTxbtD8TjYqIznILXReqwnSPqLRDkmc8RnHCBwiXxi5eHbOR5z0WE6
NIfQ4eTefXsp+98pgD6PFsECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 364752432658974757504412155424848659332428
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-18 10:13:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-19 10:13:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 853084701273685152431684815783072544151440520880594865589533393856640641903710601453895176131960268467830996311258334851863058712584255016969972082996471069951756082392315558666256995082632370030539256831389782875252611866928576452535991531675061559003077911270289907398390271404145913290662795014773209475959334525036426523774966035918126885619467324804150553954472375042252377748640512915385504712945813557257697974128288928960185405275718860980762576812214508464200824830163860421607610914293457722328839688429696425764594516286211202734628048998868090579507828343371780557815345440776059474878440316088162161858502798581297649965715235208800267563454738892934749263093751178963065118298366576140823279288569337005276389923421986345650961809927203322600829327776334689254188775294910680277422893056072311578911534176131278516176310940983191237517118370355487682855322193145413598853374788801052591172180284569126314816868322478011059003564251675680521992333716056540945977954744268054188288698883898241843978706884222863527903286469454401665966804671799825118564701904881286601573482677735836887258590296155911557378701878917842949990793893710301162595393899409889025314661043091848267264201336918997166423210248643210293961234113
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14eea77ce0f6613e1c0796714f8a92c5b65e9207
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000169004fa43d0000040300473045022100de4ca65bdbff669d4ae15be73fe2fa75f8c389cc5920814f6d0a7e4dfb4655240220135dee7332ff63a92e8545ef023631b07eeae83eba823b5b954a0fcb00981a25007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000169004fa61a00000403004730450220632d2aeff4a5e01cb38eebfd3b5a69dbdf2112b7dee28cb7e8dec28dd5ab8067022100c71afa393182635784fa7fcf07481c5beb0e3ce6ded23ce09f2d261c66b49330
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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