www.ornamentals.basf.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0b:df:23:cf:98:dc:36:de:04:0f:a7:28:a9:d7:32:a2 was issued on by Amazon.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.ornamentals.basf.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:df:23:cf:98:dc:36:de:04:0f:a7:28:a9:d7:32:a2
Serial Number (int): 15780116484961053700706462844749034146
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:83:53:89:71:4d:84:f5:2d:7c:3f:e1:98:a6:8c:91:bf:6f:45:bd
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): cd:db:47:ed:b9:7f:8d:a6:8b:22:ef:13:20:94:a0:2b:a8:e7:ec:cf
Fingerprint (sha256): 0f:fc:7c:1e:76:34:11:50:47:ec:17:7a:cb:b0:60:29:be:8f:fb:df:6e:3c:17:75:9e:15:12:d4:e4:23:35:73

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.ornamentals.basf.com

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ornamentals.basf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ornamentals.basf.com
dispersions.asiapacific.basf.com
ideltis-wheat.com
butadieneextraction.com
www.rightbalancebetteryield.com
www.alkylene-oxides-and-glycols.basf.com
agproducts.basf.us
www.abim.basf.com
rightbalancebetteryield.com
bauernmarkt-limburgerhof.de
www.alkylenoxide-und-glykole.basf.com
acrylicmonomers.net
cheers-energiewende.de
glykole.com
virtualaudit.pharma.basf.com
www.cheers-reallabor.de
www.bauernmarkt-limburgerhof.de
www.basfpublichealth.com
xangold.com
dermaz.eu
www.glykole.eu
www.forestry.basf.com
www.seed-treatment.com
systiva.com
www.systiva.com
glykole.eu
www.specialty-monomers.basf.com
cheers-schwarzheide.de
armezonproactivation.com
www.construction-stories.basf.com
www.crackerprodukte.basf.com
markus-kamieth.com
www.center-for-sustainable-ag.com
www.dispersions-pigments.basf.de
www.acrylicmonomers.net
newtrition.com
www.ideltishybridwheat.com
www.turf.basf.com
agtraining.basf.us
www.cheers-schwarzheide.de
agromiles.ee
natugrain.de
www.technische-gase.basf.com
www.glykole.com
www.cheers-energiewende.de
ontdek-basf-antwerpen.be
www.acrylmonomere.basf.com
armezon-herbicide.basf.us
www.elastopir.basf.com
www.basf.asia
agronomicadvantage.com
basf-it-services.ch
www.solvents.basf.com
www.enertite.basf.com
www.dispersions-pigments.basf.com
www.cracker-products.basf.com
www.loesemittel.biz
seed-treatment.com
www.elastocool.basf.com
www.agcelence.basf.com
cheers-reallabor.de
glycols.eu
www.kunststoff-additive.basf.com
www.industrial-gases.basf.com
ideltiswheat.com
ageducation.basf.us
www.glycols.eu
www.loesemittel.basf.com
basfpublichealth.com
www.ideltis-wheat.com
ant-institute.com
www.kauranat.com
www.emuldur.com
betatene.com
www.elastospray.basf.com
www.info-pharmasolutions.basf.com
basf.asia
www.acrylicmonomers.basf.com
www.ideltis-hybrid-wheat.com
www.cheers-energytransition.eu
agsolutions.com
ideltishybridwheat.com
cryogenic.basf.com.cn
www.monomers-marketing.basf.com
www.petrochemikalien.basf.com
ideltis-hybrid-wheat.com
www.kauranat.us
www.spezialmonomere.basf.com
www.composites.basf.com
www.ideltiswheat.com
www.health-nutrition-marketing.basf.com
www.petrochemicals.basf.com
loesemittel.biz
www.skytite.basf.com
www.biologicals.basf.com
luphen.de
soluplus.com
cheers-energytransition.eu
www.butadieneextraction.com

Other certificates including the domain name basf.com

(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for www.ornamentals.basf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAultJRv+WcabCyj9nRQLX
R7aQuo33MLJKlmQwoyGwDhwkoZ8PglMQlTkL2BhnSP6OqbNrhDpMNRHQfymRIZUV
EbCJnQBbmE6GBnUGlv0fGpqMyD34ICcPeYnAUpy9l9yIf0cmJqb0H/I0jA5tVjBa
yfIoYz6+jcdnjSu2XPy4Aohx6iGDJIe3a8BhZ34AGmmJMB2ZeUDdxh6apW3kp69O
b0zRBv92UedfO8qtcnec5aifMAlhANHXQIZGAkGnzDZPp+sde7AWT3PkZLRlx56+
W5tJx2JnOG8oepD7/0WTh5vTwJytSH1dVj0K28T/k0sqN2aD65pRhKoGROR0vuY6
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15780116484961053700706462844749034146
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ornamentals.basf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23525339646162527400136641455200930774148921252363241397141145200122042457016318522940127506194929891077055811574275762765521841627839551395165940511543678564982181032302941770309719406868095941135665290071167091161096782702475540207948195816873792645109728801614428917586314616366190098492472747906948363928019247913768008020200375024476790564598461901740627600591057104282183030773763092501804882843246120865056030654159406637683602661296123911146192521578270985674759785747535113264667359822073894479759976271495553842959382958926652191080035874953073716871317327010403235896886319701910005686409031565637367249493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14835389714d84f52d7c3fe198a68c91bf6f45bd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2384 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ornamentals.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dispersions.asiapacific.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideltis-wheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'butadieneextraction.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rightbalancebetteryield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkylene-oxides-and-glycols.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agproducts.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.abim.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rightbalancebetteryield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bauernmarkt-limburgerhof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkylenoxide-und-glykole.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acrylicmonomers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheers-energiewende.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glykole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualaudit.pharma.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheers-reallabor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bauernmarkt-limburgerhof.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfpublichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xangold.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dermaz.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glykole.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.forestry.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seed-treatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'systiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.systiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glykole.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.specialty-monomers.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheers-schwarzheide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armezonproactivation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.construction-stories.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crackerprodukte.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'markus-kamieth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.center-for-sustainable-ag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dispersions-pigments.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrylicmonomers.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrition.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltishybridwheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.turf.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agtraining.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheers-schwarzheide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agromiles.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'natugrain.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.technische-gase.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glykole.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheers-energiewende.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ontdek-basf-antwerpen.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrylmonomere.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'armezon-herbicide.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastopir.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agronomicadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf-it-services.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solvents.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.enertite.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dispersions-pigments.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cracker-products.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loesemittel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seed-treatment.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastocool.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agcelence.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheers-reallabor.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glycols.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kunststoff-additive.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industrial-gases.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideltiswheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ageducation.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glycols.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.loesemittel.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basfpublichealth.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis-wheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ant-institute.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emuldur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betatene.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastospray.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info-pharmasolutions.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basf.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acrylicmonomers.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis-hybrid-wheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cheers-energytransition.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideltishybridwheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cryogenic.basf.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monomers-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petrochemikalien.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ideltis-hybrid-wheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spezialmonomere.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.composites.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltiswheat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.health-nutrition-marketing.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petrochemicals.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loesemittel.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skytite.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biologicals.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luphen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soluplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheers-energytransition.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.butadieneextraction.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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