www2.basf.de

- BASF SE -

Issued by thawte SSL CA - G2

About this certificate

This digital certificate with serial number 51:d2:98:ee:15:e9:ff:df:f1:58:c7:b5:df:b0:db:b6 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BASF SE

Organization: BASF SE
Organization unit: COM
State / Province: Rheinland-Pfalz
Locality: Ludwigshafen
Country: DE

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:d2:98:ee:15:e9:ff:df:f1:58:c7:b5:df:b0:db:b6
Serial Number (int): 108760951788215006212702948140233317302
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: c2:4f:48:57:fc:d1:4f:9a:c0:5d:38:7d:0e:05:db:d9:2e:b5:52:60

Fingerprint (sha1): 9e:93:0c:48:c9:e2:2d:39:52:bb:48:05:cc:79:14:79:fe:21:84:df
Fingerprint (sha256): 21:20:34:ba:ff:04:f3:8a:d1:a6:55:09:e8:f6:f4:e7:c7:bd:f6:26:e7:e7:d5:7a:ae:0b:d4:aa:ae:c3:65:f4

Issuing Certificate URL: http://tj.symcb.com/tj.crt

Revocation information

OCSP Server: http://tj.symcd.com
CRL Distribution Point: http://tj.symcb.com/tj.crl

Check the revocation status for certificate www2.basf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.basf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www2.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108760951788215006212702948140233317302
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SSL CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BASF SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'COM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www2.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 828913366876359400279718711248521534397860293954691014955106283285790246111754090092080789212367158895653376962888102321011564861509581063576381033657951024467212964753425064836443214390917918382755775911837086878347198624265263665069078065755629992112274596899693976933341014293630179153214139570434889992556936895184623428017728541093383789533501130568725481249976204650170206536375351003997111320488607806567986905247468581852122450468091341279350444791305274311912018422774734999378655228584338681745016908535695949603027663780963652138207318076013820331828087697284621406038886651828451874104351086415433143133930321676123094797383897732263221077521359252083244179354492828814818343550801476127683709580225451135505677536105450491118906912687853010606563712251104579930140647382644585237673516437072641037221689204460277010083659708627697690624333460088749185024018029195478999574816470851625314354466331228967181559563674519729276066003989513497595651013652032097768125553745416541383502884541625622247845385885282275686138677313277548940005298412108933438395379841088087504612457339667871346726997177327699816417707298503793776345596039671876969953856061044341824046137097020213179542954085094777361030300098331620945958290309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c24f4857fcd14f9ac05d387d0e05dbd92eb55260
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tj.symcb.com/tj.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159b0d71b3a000004030047304502206c2883bb7d1eecd3537ffe5a258905a39527d49f1e26d8d6cc9aca541b195db2022100b2f3af90b5b003a830f1d53278dd6a70fe174cdc3128d70445c48fef78f94111007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159b0d71b6e0000040300473045022004cc1c6abf39ee9bd922e571e13fb32d417aaaba53dcf67031506e24d56368e8022100cc081c93d647ec39798d78ff0c7d4aa7f6f3281f9c8fb250fb93c3ab67b4ccae007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a500000159b0d71c2b0000040300473045022100b91301cb4fd67ef750226aa2bdfab573d4aa6f57f47fd75092f5a263ac9f472102206271d147ec846b62034848400c90366172e2c9f56b0d330ee1e3da1bf037f5f1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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