www.agrishop.basf.de

- BASF Business Services GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 03:f5:2a:58:1b:76:4b:d2:ab:49:95:d0 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f5:2a:58:1b:76:4b:d2:ab:49:95:d0
Serial Number (int): 1224841819954230819981727184
Serial Number lenght: 90 bits, 12 octets

SubjectKeyId: 71:a3:98:ad:4c:c9:3e:3c:f0:bf:7e:df:a5:eb:0f:39:e2:0e:60:73
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2c:35:d8:3e:b7:8b:0a:27:7d:de:10:27:14:a5:c0:d1:b3:2c:d2:16
Fingerprint (sha256): 18:f0:da:f9:7f:88:b3:0e:b4:b3:f6:b0:38:58:d2:28:eb:5b:32:69:08:a1:8c:22:11:41:98:c0:d2:c7:51:6f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.agrishop.basf.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.agrishop.basf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.agrishop.basf.de
agrishop.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www.agrishop.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1224841819954230819981727184
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-08 09:34:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 09:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.agrishop.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 883404603432879354162157272269838029528688290221105558611767824210524303231457769937379166006639387678914729827550980815948832751860117019210738543956530564742132623147639063312843600657298661928320239917246839803493738212603467835341588180042110772928815513356611522770786240364963165665415698705056162546833393126043169660081902649720796452785894720278240332673918379237268865211090099357831836512498282449935320493937176970455966302317862589431529267487215332466435606327121471504483756756658154052968685761940413115331328741141163582500932372682064033917836282371725042260109700564785669942383208097447907541409337249659419115554740137031755147213799429860137738534175458269494226461851211512215149747425490596347435661618949166770404648890541110065800149239478841774329765034741713347254135911306177942327008858272057113987444585711410384150154326221616771977551232591284459232533106276317343668005296558494907042885291578823779678795725433409408108521283802687525651756225778054728942192791959557895985656906922075207663177647736394885638410222115158993095930564446081715070296060542788591304746461300303343341686311470998866968854565869135791801448957230907253807952363820595717198738539845097925776808553349084841800900330923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agrishop.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrishop.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71a398ad4cc93e3cf0bf7edfa5eb0f39e20e6073
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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