www.wirtschaftsbetriebe.basf.de

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 04:94:93:4f:5d:5c:01:10:99:88:34:e5:37:6c:cb:54:11:da was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.wirtschaftsbetriebe.basf.de

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:94:93:4f:5d:5c:01:10:99:88:34:e5:37:6c:cb:54:11:da
Serial Number (int): 399006742631725499707549797708619758965210
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 83:a9:1b:eb:b7:44:cc:39:0c:f0:4d:4d:11:fe:7b:ad:cc:5e:c8:44
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 3e:6e:5f:c5:c2:fb:dd:ec:a3:24:50:81:3e:24:34:af:a6:72:f0:99
Fingerprint (sha256): 49:a2:f1:06:26:84:3f:8a:41:68:17:58:0d:c8:05:59:da:3c:89:0e:7b:07:01:3f:bd:0e:b3:78:2e:f8:fa:c5

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate www.wirtschaftsbetriebe.basf.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.wirtschaftsbetriebe.basf.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.wirtschaftsbetriebe.basf.de

Other certificates including the domain name basf.de

(limited to 100 certificates)
omega-3.nu
www.omacor.org
www.wirtschaftsbetriebe.basf.de
www.engenia-herbicide.basf.us
master-builders-solutions.basf.pl
bop.basf.de
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
www.omacor.org
ausbildung.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
www.standort-ludwigshafen.basf.de
abdichtungen.basf.de
www.schuelerlabore.basf.de
basf.sk
omega-3.nu
www.agrar.basf.de
www.wirtschaftsbetriebe.basf.de
baspack.basf.de
www.ornamentals.basf.com
agcelence.lv
www.basfistmehr.basf.de
www.sorted.basf.com
www.wirtschaftsbetriebe.basf.de
www.findadblue.de
ludwigshafen.basf.de
www.anil-in-kollektion.shop.basf.de
baspack.basf.de
www.surfacepolyamide.info
schuelerlabore.basf.de
www.agrar.basf.de
www.basf.de
www.agrishop.basf.de
agcelence.lv
master-builders-solutions.basf.pl
omacor.ch
www.standort-ludwigshafen.basf.de
africa.master-builders-solutions.basf.com
master-builders-solutions.basf.pl
bop.basf.de
ausbildung.basf.de
www.clearfield-profis.agrar.basf.de
www.basf-wohnen-und-bauen.com
basf.sk
www.agrar.basf.de
africa.master-builders-solutions.basf.com
www2.basf.de
www.sorted.basf.com
www.basf-wohnen-und-bauen.com
www.clearfield-profis.agrar.basf.de
bop.basf.de
www.anil-in-kollektion.shop.basf.de
www.surface-polyamide.eu
www.agrar.basf.de
omega-3.nu
www.surface-polyamide.eu
baspack.basf.de
www.standort-ludwigshafen.basf.de
basf-cis.com
agcelence.lv
berichte.basf.de
www.lupraphen.com
ludwigshafen2.basf.de
www.basfistmehr.basf.de
www.anil-in-kollektion.shop.basf.de
www.basf-wohnen-und-bauen.com
basf-cis.com
www.omacor.org
basf-cis.com
www.ornamentals.basf.com
africa.master-builders-solutions.basf.com
www.wirtschaftsbetriebe.basf.de
www.weinkeller.shop-intern.basf.de
*.master-builders-solutions.basf.de
www.basfistmehr.basf.de
corporate.basf.com
berichte.basf.de
www.agrar.basf.de
master-builders-solutions.basf.pl
www.agrar.basf.de
piaservice.basf.de
ausbildung.basf.de
www.basf.de
www.agrar.basf.de
www.schuelerlabore.basf.de
www.weinkeller.shop-intern.basf.de
corporate.basf.com
www.nunhems.ch
africa.master-builders-solutions.basf.com
abdichtungen.basf.de
agrishop.basf.de
omega-3.nu
*.basf.com
www.omacor.org
ausbildung.basf.de
bop.basf.de
www.wirtschaftsbetriebe.basf.de
abdichtungen.basf.de
www.anil-in-kollektion.shop.basf.de

Certificate

The complete raw certificate details for www.wirtschaftsbetriebe.basf.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAoauppO3FnPIgbRHPfk3N
0getpl9hs3B4/i3TsIvxyBNnsD25TSqmkmkEqj1eFlZFN4wVve9GPL4ue5LslkJY
t9eDzr0+ssc5Gx1hGPPJPgybyjsDgf1sZM4anbNMsqVSBrTsVhE/Z9H1xN4oBZdJ
FpPB2blHal+bHRuBAW+t3sk3K3k7lInzbegSAhOJAX1O6rssDBZw+81ep658giVH
cHKw58lPNI3y8M+Z5FRxkQny71Hs6fja7iWuEG4FjkEOcrhU/JnGi2d04ugrkJMg
Ym7N0gFEwqoLZ/m3EOazgNnMUtJuLcamq0gN8/FP462Rp07POETXt61Yxy+B7QbK
JPkgkKZj3dQGfXsnhAa98DuBgeJ3klX4X8ZLCIgFtwtE34on/TTNtPjFlsZwySUd
8H/THsuvZ0/K3fLRaayZG0eGqf6LzBFvkIWJA4TZQvB1Dqn1+7+o1bAGnMHoJ1F8
mtAho3HzFg5rOCtQ0AgWF/1DqPWRRJCbWvR2KeEBMEkWLiRkvPn5AaoJOk6CnYFr
lO4dhe0Xk76G8+q4a7hRg4edLU3fzKVNsoHKNvWfF7yvlsgSgIEWU/bBfSdZmzgB
O+kb9jfVUMkg6OmsmGTfk9EkyUDtyBtaUc97BSby2eFouUTLoe1P99+TKTdG1Eth
IAl3XEOUl3Pik/4sDELQJf8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399006742631725499707549797708619758965210
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-26 06:04:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-24 06:04:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 659558330127212883026327023478580994547336658234265603084179931733804736782165978957433978214497017739595561459514362765325671487840770290832313743992090304119576113857402218303738060154919659267241786056732924801807714468735326115010039452310088018819961016298931722092695796780982905718035254405768302496296960269334363783063371190142468523568427664194993378183197897836737467416038922445826788740092050814904670016713760988121663699597356396108158862862922030365560474009384564315818878554427929022055466791243816233838759770794197773118883052431471683956156534476944450119559449590443151539339729265027242375140569976479355457174564721583296397227322411068928854002698670512129995969280603851943468443618049318882570275801537223926685919469827838169973595725581241794643394180565564186935439540545030576610092609360262122386900101426454205478507302247820766367933091958138699318315376276844993854038282988912091341071828574523013156451834182542418093061764394673042458405018340281592664126268104565955207616878652113816823425411878687886540373420480778612587966177115183035433931093535270699450948186856525712261612686780374794708421445248302512712580886080863519349667147004703395841950568323111233279343540534597525667167872511
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83a91bebb744cc390cf04d4d11fe7badcc5ec844
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wirtschaftsbetriebe.basf.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016cccbd39040000040300473045022100dbb6193a986e1f7de338b64f94115a579cbd29fe9b5e43417f1dfa9ca27ac733022024e9674e91aadac01b798541a4479c02abe25f234b18a08314fbeacfc86bede000770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cccbd38d100000403004830460221008d5c9a41bd45c7f509967dfe1848261ba116768f2d819598f989a169a88832e50221008ed43ed23855f1bcd2e90687632e70689251514d310f6d66194149f911f2506c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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