www.baslac.com

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 2c:12:ca:9e:ab:6c:97:74:b7:c4:77:83 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:12:ca:9e:ab:6c:97:74:b7:c4:77:83
Serial Number (int): 13640057941859764069002934147
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4a:75:ad:dc:b4:2f:0b:b3:68:35:d3:b9:c0:0b:ff:6a:b7:1b:4f:5e
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 69:ab:86:af:5e:01:c7:75:6e:64:30:21:d0:95:4c:8d:b8:42:38:55
Fingerprint (sha256): 12:05:f4:fe:13:72:0a:bc:3a:3f:1e:59:9c:01:76:ab:74:55:62:a9:db:72:79:4c:4e:9a:55:9c:7e:e5:7c:6a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate www.baslac.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baslac.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.baslac.com
baslac.com

Other certificates including the domain name baslac.com

(limited to 100 certificates)
www.promoshop.glasurit.com
www.baslac.com
www.promoshop.glasurit.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
basf-cis.com
techinfo.baslac.com
www.baslac.com
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
color-online.glasurit.com
*.basf.com
baslac.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
www.promoshop.glasurit.com
color-online.glasurit.com
www.baslac.com
www.baslac.com
color-explorer-prod.rmpaint.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
color-online.glasurit.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
techinfo-test.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.baslac.com
msds.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
*.basf.com
color-online.glasurit.com
color-explorer-prod.rmpaint.com
basf-cis.com
*.basf.com
msds.baslac.com
basf-cis.com
color-explorer-prod.rmpaint.com
techinfo.baslac.com
msds-test.baslac.com
techinfo-test.baslac.com
color-explorer-test.rmpaint.com
color-explorer-prod.rmpaint.com
www.baslac.com
techinfo-test.baslac.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
www.promoshop.glasurit.com

Certificate

The complete raw certificate details for www.baslac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YXO5YQ28+Fe5D6Me77G
DlzCSIorXBFSE2HqeJccouYKphCIIBcDNCwzBJY1GH3S8RlCIyjuNKF3sxKaHBVO
OROHhQfzsMwLoA78F7sEu99q0csSXKCZmgUb/4mdK75L0s4oeYawmASSxBMuyQbT
+gIhsjUMWvkVnFZf6HRXMJYgaZ6Qr1BFUxaEv2MNcpNqhdgOfONjjkxMYeoLu4Dq
Z8zriEk7M9f2hGR7bve+qHO7j//UfCGKLrwTM3WfKqPzBm1MATZbcSP6yZy/A0m9
Has5FxJgF3ffTZzuImYe96erRIsUH34tb4XKBYWb+IMG5ILZZuDnutmP13gbrjN8
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13640057941859764069002934147
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-09 07:47:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-16 06:47:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baslac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26954742235314031472104113209924880228455841213329284092361761509245706855114901281105180429101874997007638908329329736502379430700456084512416510536695886848614761471096296917949386717095242559468041269589003859501389018669273603656608853858012738801422187590119226633050544450074130422333301121974231334851595648098189149913317052231355511681147862501643885522511833803956733465142234967801860677292476860634927034196621388707652580612045482607198436892141352426937103075348728785558102297779032424268423856390919082231197812394856489843210201567681965597876127045498634806550637859332679657745912040554060215188581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baslac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baslac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4a75addcb42f0bb36835d3b9c00bff6ab71b4f5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ee9a08fdc0000040300483046022100be755b4fc058292879d31c3e42a11be53347d503d13eb1074085a41d5e0c36ad022100af96a372abb48f7c8d0b9f87f4988a7de3ca1b8e1e70b1e53e53d341c318394c007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ee9a09314000004030046304402204f651f5925d7cd80875faafed693e62220a1c551bfdc31f6f6e1d293b8f5c8dc02206b13aa980715f98062886cd97437365a1331617394e506e2d8dddb97b9264b9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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