www.bodyshopmall.com

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:40:8c:39:c1:19:6d:6c:56:fa:8f:54:26:1e:1d:8f was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
State / Province: Rheinland-Pfalz
Locality: Ludwigshafen am Rhein
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:40:8c:39:c1:19:6d:6c:56:fa:8f:54:26:1e:1d:8f
Serial Number (int): 20273571048831088386182089284689730959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b7:0d:b0:fc:f3:66:14:fe:74:ee:8d:18:33:98:1c:05:b2:5b:4c:59
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 12:bc:c0:e2:a6:43:65:61:76:e6:b0:69:b4:8b:4a:e9:96:b0:a9:c0
Fingerprint (sha256): 1c:d0:cc:98:53:af:2f:6f:29:a6:8c:c5:6f:f7:1e:d6:ba:99:9b:ad:21:30:8b:3e:39:58:fe:3f:75:25:ec:ac

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate www.bodyshopmall.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bodyshopmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bodyshopmall.com
bodyshopmall.com
smartcolor-online.refinish.basf.us
smartcolor-online2.refinish.basf.us
visionplus.basf.com
www.basfrefinish.com
www.coatingsmall.com
www.visionplus.basf.com

Other certificates including the domain name bodyshopmall.com

(limited to 100 certificates)
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com

Certificate

The complete raw certificate details for www.bodyshopmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnaOho5Q9wioavg4uVSxU
j00d33NUEdL8L/F2ZTtOg4f6Fod97nb+4hhcqcS/BjIhDAODkQXg8ThdpfrSQ1Mz
OwdlBDu03zGljW7WPITShvuXcFcsm5a1LhzPT+R5q2ihRzf0YEg4cjBPvNRM2zlE
qpf5HWo/4wZmCDUL+OXixmwnyCKovl6jK7nu5M1FyF+fuwsdAXhmikrKuROUfU+n
ICbiHRTtCf8mG/0CAWzxe6fWLjm9NpQ3GAG/I4KhyODoZXpnUrqr7lQ7y0revfyg
0Al7c4/KBWAJAIS/3PpYWH1c+HcA+uF31u6GnosJ7b2LlzAUAZqRbrieoDs3wXdB
E3K4xxs6gLsn7nUOFAFLSS4DbdFKntFYTd0F9WVvTZuy+qm/UVAH2JmxJIt42K6C
5mrPpPfLyHjsAvH5EaPQQNIF1f0VPOQRiiaTUYjTXVHDArj9GFM24Lt/1yR0HVcr
AI9Qvb0hjymc+q2DqstqVGXqFFCrMKm/cCqknW6Cn6Yz87vWnl7m7giqsiy1Utz6
Rnyj+2s6g7FSeegoq8wI9YLmCuM+OnYJVQkBPk0XRxgvERgqSUHqYSO9g2EOzFv8
2EWdzGEWAGlcqP/c4dSaRQfp00UMNjK0ORPT+u1+KmL+FELx4Kb0A27GAnLuqHXY
TBITlIx3VHH7f7D16S0iJrsCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20273571048831088386182089284689730959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen am Rhein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bodyshopmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 643111766646372573987347895448145450642693412799457500760684852398343687414891255247772748916583670100253615547580269130287878789299688715466108489046862302693607875468801809625415819988542670809202263220089881998713340427742090316636761609089591129074866855148535945903631574529561786259490348334943358793106535679369386127849198542446408343918416195670346384919159981867629326658110043132676338133509287873797956164876635295668052471257688714069711666262455122385124737073006667145583592978665575871431003541273368792024353268916029633783258963484532201971704467996960087744437150589421258846858582087354488006711815568511080284529983063862169909198375592606448887720920819864537176807448149867841902008185964437982440472878732687195673760791562830409863163529651873389364561152405303642963347318520289627944099893533835918993670522127618993793397453972734329936128936342788486807993601825537714494605257971013890051378172971525154846454285420246907518981916762057393602523616874597860234674034588683334829050265189507385915662123394805157030929750734631182463364485920004671093862030890067083447871540338177255577372579240993032831286031830844272028911599840578465155429672383957245592251775926394479381782611744548409940866377403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b70db0fcf36614fe74ee8d1833981c05b25b4c59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyshopmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyshopmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online2.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionplus.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfrefinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatingsmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionplus.basf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087f57772bb876af40b0b4721e01c70b3c261f5f0ff235e07999287429a6389a0b30bd36c02178b40b8a3a39483febeabde89056a6fe54084c8d42f663bb520e5b7fdf8b33f0799e53a16a7cd2d369e123e60d664893a0a84953dc691657722d9bdff13f9cfd62a4b1dbf48a8d86f4e998b671686b36d48e836c387d8fde79fa0ba2d47d513b146a74772adee9e3b2396c1587c1ba6b668e24ee14aafe667a006dce679fa4d394dc81ffda3bd6e1ad53c72811dbac069afd81d6871dae563b9bc96f14bfcaed1f57c7e7d33f767ce3359d3ee560b3126d17d47bef3c7aed16d62ac0d47b65fbd4ef2b40d6a503e822a9376fabe882de172f033d8576df49f0ca8