order.covestro.com

- Covestro AG -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number 07:36:cc:98:de:71:4d:4b:74:58:7f:a2:88:41:45:29 was issued on by Corporation Service Company.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Covestro AG

Organization: Covestro AG
State / Province: Nordrhein-Westfalen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:36:cc:98:de:71:4d:4b:74:58:7f:a2:88:41:45:29
Serial Number (int): 9589129723937784723276731568621700393
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e3:9e:32:b1:a4:d9:ba:3f:9f:1a:01:af:2b:8e:aa:a1:17:1c:70:99
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): e9:1d:50:b4:ae:c1:19:c3:ff:5a:6f:35:40:50:0e:e9:4e:8c:e0:ed
Fingerprint (sha256): 15:27:6f:0f:28:6c:bd:4c:cb:0a:6b:ad:3e:27:fb:32:fa:69:90:0b:51:76:73:52:cf:75:9b:c6:84:ff:43:36

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate order.covestro.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for order.covestro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

order.covestro.com
china.order.covestro.com
www.china.order.covestro.com
www.order.covestro.com

Other certificates including the domain name covestro.com

(limited to 100 certificates)
order.covestro.com
qa.service.media-assistant.covestro.com
customerday.covestro.com
app-main.easy-entry-app-qa.covestro.com
tec-p4t-p1p.covestro.com
initiativeplanner.covestro.com
pureinsights.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
commoditycatalog.covestro.com
*.preview.covestro.com
www.solutions.covestro.com
myaccess-pgh.covestro.com
catalogue.api-qa.covestro.com
cups.covestro.com
www.i4pto.covestro.com
customerday.covestro.com
mtr-qa.covestro.com
order.covestro.com
adamintellecat.covestro.com
customerday.covestro.com
new-select.covestro.com
order.covestro.com
www.pureinsights.covestro.com
extsipap.covestro.com
extsipap.covestro.com
mediahub.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
order.covestro.com
*.preview.covestro.com
vmi.covestro.com
www.mediathek.covestro.com
app-main.easy-entry-app-qa.covestro.com
etrip-cn.covestro.com
corporateshop.covestro.com
www.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
api.select.covestro.com
select.covestro.com
rimgate.covestro.com
dev.identitynet.covestro.com
qa.identitynet.covestro.com
www.pac.covestro.com
adamintellecat.covestro.com
www.covestro.com
trainingportal.covestro.com
api-development.lisa-qa.covestro.com
sentry.select.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
warehouse.covestro.com
www.covestro.com
em.covestro.com
proveedores.covestro.com
easy-entry-app.covestro.com
catalogue.api-qa.covestro.com
commoditycatalog.covestro.com
proveedores.covestro.com
www.sheeteurope.covestro.com
extsipde.covestro.com
www.prodin.covestro.com
pureinsights.covestro.com
trophy.covestro.com
catalogue-cognito.api-qa.covestro.com
cups.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
investor.covestro.com
apac-qa.order.covestro.com
update-manager.select.covestro.com
extsipap.covestro.com
www.covestro.com
mediahub.covestro.com
www.solutions.covestro.com
cp.covestro.com
investor.covestro.com
service.media-assistant.covestro.com
www.covestro.com
salesaid.covestro.com
logging.select.covestro.com
customerday.covestro.com
pac.covestro.com
*.p6.ta-qa.covestro.com
qa.service.media-assistant.covestro.com
docs.api.preview.select.covestro.com
smtpmx01.covestro.com
qa.media-assistant.covestro.com
investor.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
test-catalogue.api-qa.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
proveedores.covestro.com
customerday.covestro.com
extsipde.covestro.com
extsipde.covestro.com
monitoring.select.covestro.com
iot-platform-qa.covestro.com

Certificate

The complete raw certificate details for order.covestro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLyh22S7gKrlYkRUNllJ
x7/6g4qCmLkzEx5BrM9AvCGCmdzZ9nxadUklJUEaHLbtkPeKqiRF0L/Rr9vvEmt4
ojP5uax0nGEqIsWIhMjyZWYerPWostgHTPc383KkQXF/6ArqpCXtCrimMMQncXWu
1BENb+Eii6fR0R0+wD9HZTq1z8ulu+ADoYH0jbw5mwcDvGrfCQPF2Zt6B7QCVU/q
h4pR68fyKafs8ywqBO6Bn8jyGMW5RnKhkd4sBklum6ISuMUB7Vo3CM7LKTHvcz1S
pcSe5qZCn+xHkXQ65FcR4ebQEN/DV0IFAXuvmUz1PU5M9Wms+VbyWTlw0cbrveJZ
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9589129723937784723276731568621700393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covestro AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'order.covestro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19281240386082764917862140551702540997203866323384458006946470641603664906132167470964027841361735993361941589961690600783874986685079988823734212513229887852462041329990438102132534862182251274270751397977387285741315349553191532668655260779574603836264912846344711820348777139640296425116826915605065810091162947759130519478703604761467734972207487900306533915772431780968476280737971676528380040947743782149820826425034063145174473818185344539547585105048580785537462151632902661512044454088967438487540765307242947227105135106365225619628260227665026602235467059026645659908780424932865735952890259878737648703789
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e39e32b1a4d9ba3f9f1a01af2b8eaaa1171c7099
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c0fdc4629000004030047304502205b5097d0c1e9c289482a90cdeedd5b1ac4cafa0168686b39a16227fba140fbcf022100f7b247cea31e74c027a22905c81e6b2165abc542c97a283cbcf360741eee44940076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018c0fdc465300000403004730450220318ccc954ffb251110f5dab9993709fa75096f0a8b35d632aa0782bb322417800221009556942f7daa385035e38ca05059b562e4d8c67c0c38d5986c58df88e32aa726007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c0fdc465800000403004630440220688e70f35f2dbfdd4abda69297aa4a8551f67f695ac9cffc4f0ca7f0edbef67302202bb9ec4f00e814e13b02cdd3a1ec73ad406e71b57976b439f2d9a616a8257745
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.order.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.order.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.order.covestro.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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