e-applications.basf-ag.de

- BASF IT Services -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:21:be:40 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

BASF IT Services

Organization: BASF IT Services
Locality: Ludwigshafen
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:21:be:40
Serial Number (int): 1277279808
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: de:3b:fe:44:85:25:3e:36:60:97:91:8a:db:89:dc:2a:31:e0:f4:06
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 33:72:6d:04:8a:42:d6:7d:e8:0f:38:54:e0:b3:e2:f4:da:25:e8:53
Fingerprint (sha256): 30:11:08:6c:a2:a2:d2:e3:c6:bb:e2:9a:e2:75:39:cf:57:96:fa:d4:b3:59:35:ef:4a:70:28:28:d1:37:18:aa

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate e-applications.basf-ag.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for e-applications.basf-ag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

e-applications.basf-ag.de

Other certificates including the domain name basf-ag.de

(limited to 100 certificates)
e-applications.basf-ag.de
voffice-partners.basf.com
e-applications.basf-ag.de
ultrasim.f206.basf-ag.de
qual-search.dmz.basf-ag.de
autodiscover.basfad.basf.net
ndes.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
eumobi01.basf-ag.de
e-applications.basf-ag.de
bgqr3.sslclient.cpicloud.basf.com
*.han-bnw.dmz.basf-ag.de
e-applications.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
e-applications.basf-ag.de
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
da2.basf-ag.de
vpn-eu.basf.com
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
afaria-test.basf-ag.de
afaria02.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
voffice-partners.basf.com
afaria02.basf-ag.de
U063SECURITY.PNU063AN06.BASF-AG.DE
m11r3.bcs.de
eumobi01.basf-ag.de
ecom-baslac-prod.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
afaria-test.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
da1.basf-ag.de
afaria-test.basf-ag.de
ultrasim.f206.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
autodiscover.basfad.basf.net
eumobi01.basf-ag.de
ndes.basf-ag.de
zftr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
e-applications.basf-ag.de
autodiscover.basfad.basf.net
qual-search.dmz.basf-ag.de
eumobi01.basf-ag.de
m11r3.bcs.de
eumobi01.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
afaria02.basf-ag.de
ecom-baslac-prod.basf-ag.de
m33r3.bcs.de

Certificate

The complete raw certificate details for e-applications.basf-ag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDc20zpzVKs7HOMfiPWW
RfEH/3Wjav3wzpm9hkjbDRy8mB3R02D+hRgeQE+qQN70CGVT4/mcibu3m0CfPKZS
fhvj1zOWTnAJicjNGtJMFUMiBnSCfDQIRwKYMZQCUgdNaCfSRykrtWEnMkF77n+L
Q7FuGQeQwXAe4WYEJtPNadfydBFu7euW/TNT5v98XX9MLSG64ojuQfTMo+IYZtNl
uQhaf5YFqsCeOk3ZvKtiU8P1h3dLsFeG84HnJ4Yrq06hRfioRoPOfr+LyNWCFKH9
aa6SI0uIEJAQHdpPg0oq9V94RUegywXYLIhyDqtEA18niSpBDJYjtjPLA9RN2CfJ
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277279808
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-07 07:31:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-22 22:32:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'e-applications.basf-ag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21235262351652556180770000184846207429100906944610260397612017376214175227445266718024370999817901249793437732571418191858389020159733832127851491614393346892428192221578277373468214232951142064217434670723339511018983305061866558326791322387200919872929024763252028062352010021677753670240802900821051345755051517946656192651572323019939168517986930628852630741496695200347475734535580986805261464311828905836289679847618780715836917537941911527520780425134667003583974195548535260880641017754835712407083603002206830913544321218253471197400883937950310606788051616786110932114380338936770435318043383321561108302139
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-applications.basf-ag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de3bfe4485253e366097918adb89dc2a31e0f406
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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