www.wirtschaftsbetriebe.basf.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:24:3e:69:2e:38:9a:33:41:83:1b:e3:3f:a9:25:bc:8d:7a was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wirtschaftsbetriebe.basf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:24:3e:69:2e:38:9a:33:41:83:1b:e3:3f:a9:25:bc:8d:7a
Serial Number (int): 273669981268818677090451500388514480819578
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: e5:6d:e9:47:17:d4:9e:22:04:5b:e8:59:b1:79:25:c1:33:f3:e5:78
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): b7:84:6e:a3:0b:47:aa:bb:7a:a7:9a:cc:93:61:78:21:84:07:d9:40
Fingerprint (sha256): 12:1b:58:2c:48:f0:72:17:2d:10:07:e6:94:93:9b:d5:1f:f6:8b:81:1c:17:a9:75:6e:66:99:40:d0:d4:f3:b9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wirtschaftsbetriebe.basf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wirtschaftsbetriebe.basf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wirtschaftsbetriebe.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www.wirtschaftsbetriebe.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273669981268818677090451500388514480819578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-30 07:04:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-29 07:04:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 766123173365187333924809445844179142771235539022200018944777083053314556134459950814290670807539206869709555849942895741826680761862000931288865944248416311402338047250467081098683178835787155723646995321785988497656863547689094513212099216616254417226916416091896712374202754855341518360019833288626259595848305728062332078455371182672591708318832488048583067932935827459252652361721153959090327555670364997169923799366344728810564449255275678230612536056488584083413677949737065798521250312849302561310038953807017462965687135007573579910839496656265820612974266096431045790680997529213003575071897172930011627318578443262563453347218308855668672534365068605079907574573557378490547936582894765309606165236996243549622880135754275695663383508015587301165714421330032777770446146395902794794346807538971344930320015988153384040394609283217453143422450969809640365694073714391325067611531602237377106303708604413682253989604312660341339925464653546446196488176641159525279615166178227060920009524830361963321788958146153307544297364484801149863632956094112710802035200118123280449735606333413489459730580466819779106681760322379661911800756571866404420212963861400794776497661015610856708665819352802170217264554048589288060980375471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e56de94717d49e22045be859b17925c133f3e578
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016f55d57a0b000004030047304502203e64057e20013335eeb18abddcc9d9179148652984af2a6aae567e08d971a58b022100e24ac1a99095f8351718cb4768969542f88cf91dde5b1c532f56b21fa39c709d007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f55d579fb0000040300473045022100d7fab6528613b76cf6ebd0b8be4d5c2acacef8d4827741c47258e493fcba401a022005012b7a5f4f74cc2e9f81b77a4f392be576108e7640677977904b54cab32a2a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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