www.basf.ch

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:be:18:7d:80:1e:2d:05:de:dc:8f:03:7f:f1:ad:b6 was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.basf.ch

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:be:18:7d:80:1e:2d:05:de:dc:8f:03:7f:f1:ad:b6
Serial Number (int): 14279313081972139548096163623466020278
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3c:a5:8f:ce:ae:72:99:cb:a9:c8:7c:78:25:08:a4:a5:29:4a:dc:ab
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): be:1b:19:a9:91:45:22:2d:3f:f1:04:31:7b:f8:5f:b8:d5:95:d4:7b
Fingerprint (sha256): 48:76:f7:a4:ef:92:80:56:d1:cc:36:43:63:f7:5e:07:54:07:02:28:ff:a3:7f:8c:9e:34:fa:e8:09:9b:ff:59

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.basf.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.basf.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.basf.ch
www.basf-new-business.de
www.basf.co.kr
www.basf-gmbh.com
www.basf.info
www.basf.mk
www.basf-jobmarkt.de
www.basf-service.com
www.basfse.de
www.basf.com.pt
www.basf-korea.co.kr
www.basf.co.th
www.basf.es
www.basf-pharma.co.uk
www.basf.vn
www.basf-3dps.com
www.basf-italia.it
www.basf.lk
www.basf-services-europe.eu
www.basf.co.tz
www.basf.dk
www.automotive-and-refinery.greater-china.basf.com
www.basf.lt
www.basf.lv
www.basf.tw
www.basf.co.ma
www.basf.co.uk
www.basf-schwarzheide.com
www.basf.ua
www.basf-new-business.com
www.basfs.com
www.basf-business-services.basf.com
www.basf-schwarzheide.de
www.basf.co.za
www.basf.kr
www.basf.net
www.basf-construction-solutions.com
center-for-sustainable-agriculture.com
www.basf.kz
www.basf-services-europe.de
www.basf.cz
myplasticadditives.com
www.basf.com.es
www.basf-sh.de
www.basf.rs
www.basf.co.jp
www.basf.ro
www.basf-business-services.com
www.b2last.de
www.basf.be
www.basf.bg
www.basf.se
www.basf.co.ke
www.basf.sk
www.basf.ie
www.basf.com.tw
www.basf.org
www.basf.com.tr
www.basf.ae
www.basf.in
www.basf-it-services.com
saoridubourg.com
www.basf.ag
www.basfse.com
www.basf.it
www.basf3d.com
www.basf-3d-printing-solutions.com
www.basf-de.com
www.basf.at
www.basfse.info
www.basf-grenzach.de
www.basf.com.my
www.basf.pk
www.basf.pl
www.basf.com.eg
www.basf.hr
www.basf.hk
www.basf.pt
www.basf.co.id
www.basf-ag.com
www.basf.com.bd
www.basf-tennisclub.de
www.basf.gr
www.basf.mobi
www.basf-catalysts-germany.com
www.basf.ph
www.basf.com.au
www.basfse.eu
www.basf-de.co
www.basf.no
www.basf.com.co
www.basf.nl
www.basf-deutschland.com
www.b2last.com
www.basf.co.nz
www.basf.fi
www.basf.fr
www.basf-services-europe.com
www.basf.com.sg
www.basf.com.br

Other certificates including the domain name basf.ch

(limited to 100 certificates)
plus.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
www.agrar.basf.de
agcelence.lv
www.findadblue.de
plus.basf.ch
www.agrar.basf.de
agcelence.lv
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.agrar.basf.de
plus.basf.ch
agcelence.lv
africa.master-builders-solutions.basf.com
www.agrar.basf.de
www.agrar.basf.de
rheologie.basf.ch
africa.master-builders-solutions.basf.com
www.basf.ch
plus.basf.ch
www.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
plus.basf.ch
africa.master-builders-solutions.basf.com
www.agrar.basf.de
www.engenia-herbicide.basf.us
africa.master-builders-solutions.basf.com
www.concept1865.info
www.agrar.basf.de
www.agrar.basf.de
www.agrar.basf.de
www.concept1865.info
africa.master-builders-solutions.basf.com
www.agrar.basf.de
agcelence.lv
www.basf.ch
agcelence.lv
*.master-builders-solutions.basf.ch
www.agrar.basf.de
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.findadblue.de
africa.master-builders-solutions.basf.com
plus.basf.ch
www.basf.ch
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
www.concept1865.info
agcelence.lv
rheologie.basf.ch
plus.basf.ch
www.concept1865.info
rheologie.basf.ch
plus.basf.ch

Certificate

The complete raw certificate details for www.basf.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLbkznfW2e6wJ/+oCsxX
DgmLhT9wxWJ2Z0YSuiGYOE7nWXek1bebj3qYZhyrbMbwQR0c3Dt2cKNMQE3Wezu5
yC12jaVYQQLr2hZIVWNosugZTFng6Ay1z6zCRsxXsTnUbfykrn5rkB5RlXg+KwgL
4gpUldwzXApjXcjpPP6oIYa2Jud4uSL/wh2URvC2aSZ3NoFgIl2OZHWuJuIFfbAc
juuz7WGpkNBPcFXbL4I30BV/Tjc0JcZ2gtMm6lHcC3BtpV6bxnwMwTDLOqlX8T/D
oYsbK3xdxMcU1BJxxzc853xR2I4yrHFX5k11u95PKWilv5eUYS6ujQvADkhuBXnR
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14279313081972139548096163623466020278
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basf.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20793270296473050594815008337819985052919300703610112838379958001303033510083305469073012282649775048053897205414498619129883093794598021947785362603685350970790767983082114693015033313751805167628937497626274048825507014845126931413901899321319652890679845700661138223567970050147156327986403469259259014986005183533080145286652548929116418220861522257168824203506718070449702282841510927339011886833415274535711855038371545344914696864282324616637177020598677476102783540033512989489434463192266121443603210669959115776974374079901184896940443026974078160159188209243645333040814275156209819386148879770823448711587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3ca58fceae7299cba9c87c782508a4a5294adcab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1815 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-new-business.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-gmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-jobmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-korea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-pharma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-3dps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-italia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotive-and-refinery.greater-china.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-schwarzheide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-new-business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-business-services.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-schwarzheide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-construction-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'center-for-sustainable-agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplasticadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-business-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2last.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-it-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saoridubourg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-3d-printing-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-grenzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-ag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-tennisclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-catalysts-germany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-de.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-deutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2last.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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