refinish.basf.us

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:eb:e5:e0:43:44:01:42:0a:41:6e:64:34:93:e5:ef was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
Locality: Ludwigshafen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:eb:e5:e0:43:44:01:42:0a:41:6e:64:34:93:e5:ef
Serial Number (int): 18504816146684938822547362608839910895
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:73:e0:76:c2:b8:22:7b:29:10:c7:b2:77:b6:00:a5:6c:4d:a3:2c
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): ac:41:01:46:b8:3b:e3:86:3a:56:05:40:74:ab:64:6d:3f:a5:9a:03
Fingerprint (sha256): 2d:07:d4:ed:d9:43:fa:69:1b:7d:58:ef:24:c3:f6:c3:8d:d8:69:e7:e3:63:a7:6d:e4:01:44:63:c5:c7:a2:94

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate refinish.basf.us

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for refinish.basf.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

refinish.basf.us
www.refinish.basf.us
www2.refinish.basf.us

Other certificates including the domain name basf.us

(limited to 100 certificates)
www.bodyshopmall.com
estore.refinish.basf.us
mcyclo.com
mcyclo.com
www.omacor.org
readz.com
jobpostings.basf.us
voffice-na.basf.com
www.engenia-herbicide.basf.us
mcyclo.com
master-builders-solutions.basf.pl
jobpostings.basf.us
readz.com
refinish-elearning.basf.us
construction-chemicals-documents.basf.us
crm.agro.basf.us
www.hydrosulphite.com
veterans-jobs.basf.us
teraxxa-wins.com
webmail.basf.us
construction-chemicals-documents.basf.us
readz.com
master-builders-solutions.basf.pl
readz.com
experience-stage.basf.com
dispersions-resins-distributors.basf.us
acronaloptive.com
invigorresults.ca
www2.refinish.basf.us
www.ornamentals.basf.com
agcelence.lv
veterans-jobs.basf.us
experience.basf.com
neopor.basf.us
www.hydrosulphite.com
headline-advantage-terms.basf.us
refinish-elearning.basf.us
betterturf-stage.basf.us
*.basf.us
readz.com
experience-stage.basf.com
experience-stage02.basf.com
jobpostings.basf.us
agcelence.lv
construction-chemicals-documents.basf.us
master-builders-solutions.basf.pl
construction-chemicals-documents.basf.us
readz.com
africa.master-builders-solutions.basf.com
mcyclo.com
mcyclo.com
master-builders-solutions.basf.pl
www.bodyshopmall.com
readz.com
readz.com
readz.com
construction-chemicals-documents.basf.us
carecreations.basf.us
africa.master-builders-solutions.basf.com
www.hydrosulphite.com
readz.com
readz.com
carecreations.basf.us
certainweedcontrol.com
www.basf-wohnen-und-bauen.com
jobpostings.basf.us
b2last.basf.com
betterturf.basf.us
readz.com
readz.com
wireandcable.basf.com
experience.basf.com
readz.com
www.growsmartcanola.com
veterans-jobs.basf.us
readz.com
certainweedcontrol.com
crm-int.agro.basf.us
readz.com
if.basf.us
betterturf.basf.us
dispersions-resins-distributors.basf.us
readz.com
voffice-na.basf.com
crm-int.agro.basf.us
www.basf.us
refinish.basf.us
agcelence.lv
www.lupraphen.com
teraxxa-wins.com
readz.com
*.basf.us
veterans-jobs.basf.us
readz.com
readz.com
www.omacor.org
whatwedo.basf.us
mcyclo.com
www.ornamentals.basf.com
master-builders-solutions.basf.pl

Certificate

The complete raw certificate details for refinish.basf.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18504816146684938822547362608839910895
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'refinish.basf.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 768478487655117959514609706905477816241958296034977862971322097942785651020874837115088349355374818095544584063250759847704469811212419154514361543492295888232186795450241433953202701441311865879282415526827990279085545303074507300324828579758944087125931314124123838696612944659485015113818009593691287092385981312266852613251376288604913229367028372349089249559425539743606876638811469338128782367716366313704756683217383386193527582913399596772749865886941774225773026535828730083514129110161647170879936793604756322192229653399322710503233219158783041811577918141944578098626612221057890428144736588442645455358670300878476539693081762766005296081156528100017835346271080735514764463813946820299303498528009638863353255817808341199672328690368888226840964129490252432193981700714086182546528103879173294196764918137706223733393979544937542935944027626870738419674195774080842256557453091996008657337130817790000335080765738619993560422561938199567848606341019663250400066299403419406472101817277944671140580322440631564565881987383187998366078043568215062875843741777912717274149781150700247924415103923866410377573579697816047243039877895419768402239351719496700256737258367865162811886655102901786225331869064042180719206990121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc73e076c2b8227b2910c7b277b600a56c4da32c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.refinish.basf.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0043a23bd4bb853fdd3c0e8092c3dd355828972f78c0bebf49e76da49d7bcd9ab4c40556f5d64a0d738c899bc38d84eec8cfa93a504b108debad7512cdbf05422644420795d53d4d180eb31543d69942ec5b27614c5c03caef8edf8cf5ef106b46f734a734b3c70cb14111023de6cf53bb4d88d5ca73b35d21502187bba5059e9b64f7a715bd7498eca1c7966fb1ac876a6dcf909b48ca0dd4ce83802aa3a667efdc988fbae8a8de36744ea1b09e80e4216b62ccc340b2a36bda1b712b08e343d86af6404d20b53968c1a096d42d671d8766bb116a4dec0b475c9f1a21c4a5319aaf2ab0863dda9c232ac58c9ae2317e88091c7891a2c0879c98f8e7ef6414376e