da2.basf-ag.de
- BASF IT Services -
Issued by Entrust Certification Authority - L1C
About this certificate
This digital certificate with serial number 4c:1f:de:e4 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
BASF IT Services
Organization:
BASF IT Services
Locality:
Ludwigshafen
Country: DE
Country: DE
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:1f:de:e4Serial Number (int): 1277157092
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: 98:7b:0c:94:2e:2d:24:d6:58:b8:7b:a2:04:87:9e:3a:1a:75:ae:ed
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d
Fingerprint (sha1): b4:a3:22:7e:a5:17:e8:56:27:36:36:17:ff:fc:f3:ab:d1:ae:b2:71
Fingerprint (sha256): 55:9f:42:4e:a3:2d:ea:c3:3b:49:f5:15:2b:10:62:af:e8:d4:1c:53:69:50:5a:76:ee:35:d1:ae:01:54:87:d5
Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1c.crl
Check the revocation status for certificate da2.basf-ag.de
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for da2.basf-ag.de
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
da2.basf-ag.de
Other certificates including the domain name basf-ag.de
(limited to 100 certificates)
e-applications.basf-ag.de
voffice-partners.basf.com
e-applications.basf-ag.de
ultrasim.f206.basf-ag.de
qual-search.dmz.basf-ag.de
autodiscover.basfad.basf.net
ndes.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
eumobi01.basf-ag.de
e-applications.basf-ag.de
bgqr3.sslclient.cpicloud.basf.com
*.han-bnw.dmz.basf-ag.de
e-applications.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
e-applications.basf-ag.de
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
da2.basf-ag.de
vpn-eu.basf.com
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
afaria-test.basf-ag.de
afaria02.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
voffice-partners.basf.com
afaria02.basf-ag.de
U063SECURITY.PNU063AN06.BASF-AG.DE
m11r3.bcs.de
eumobi01.basf-ag.de
ecom-baslac-prod.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
afaria-test.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
da1.basf-ag.de
afaria-test.basf-ag.de
ultrasim.f206.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
autodiscover.basfad.basf.net
eumobi01.basf-ag.de
ndes.basf-ag.de
zftr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
e-applications.basf-ag.de
autodiscover.basfad.basf.net
qual-search.dmz.basf-ag.de
eumobi01.basf-ag.de
m11r3.bcs.de
eumobi01.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
afaria02.basf-ag.de
ecom-baslac-prod.basf-ag.de
m33r3.bcs.de
voffice-partners.basf.com
e-applications.basf-ag.de
ultrasim.f206.basf-ag.de
qual-search.dmz.basf-ag.de
autodiscover.basfad.basf.net
ndes.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
eumobi01.basf-ag.de
e-applications.basf-ag.de
bgqr3.sslclient.cpicloud.basf.com
*.han-bnw.dmz.basf-ag.de
e-applications.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
e-applications.basf-ag.de
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
da2.basf-ag.de
vpn-eu.basf.com
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
afaria-test.basf-ag.de
afaria02.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
voffice-partners.basf.com
afaria02.basf-ag.de
U063SECURITY.PNU063AN06.BASF-AG.DE
m11r3.bcs.de
eumobi01.basf-ag.de
ecom-baslac-prod.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
afaria-test.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
da1.basf-ag.de
afaria-test.basf-ag.de
ultrasim.f206.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
autodiscover.basfad.basf.net
eumobi01.basf-ag.de
ndes.basf-ag.de
zftr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
e-applications.basf-ag.de
autodiscover.basfad.basf.net
qual-search.dmz.basf-ag.de
eumobi01.basf-ag.de
m11r3.bcs.de
eumobi01.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
afaria02.basf-ag.de
ecom-baslac-prod.basf-ag.de
m33r3.bcs.de
Certificate
The complete raw certificate details for da2.basf-ag.de in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFBzCCA++gAwIBAgIETB/e5DANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMzA1MjgxMTM4MDJaFw0xNDA1Mjgx NzA0MjBaMFgxCzAJBgNVBAYTAkRFMRUwEwYDVQQHEwxMdWR3aWdzaGFmZW4xGTAX BgNVBAoTEEJBU0YgSVQgU2VydmljZXMxFzAVBgNVBAMTDmRhMi5iYXNmLWFnLmRl MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4u/c9baTEevXABAGIDN QoCxv2uyvFGhllM4meR80lJJcMJRjqfl5zD84by5Z6RC5VXUZonEOAKpKgUo9k32 1yBCA0txmFto3zGD3dQyZ0k3O8wQmuU8DOh5VK3pWbjcLXEIuC9t7RQt3qHXFFIn wMtVSFPR5opYmjBt/aRHxw4xfytIpaqnYbK/DNtTpAuEgxqm2m2vUsWPGrEIiiaA gCXLWDc0mTgwBWkoQFDdknzI/wja/onKQg7hVb25U79suRLGMuyQIcNaXyGK+Avq r8FN03mMPFMUS9FWTonamojD8/bTnw1TOdctGMhmvyiraUumeVK0BOmg2AI/59tD vwIDAQABo4IBfTCCAXkwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3Qu bmV0L2xldmVsMWMuY3JsMGQGCCsGAQUFBwEBBFgwVjAjBggrBgEFBQcwAYYXaHR0 cDovL29jc3AuZW50cnVzdC5uZXQwLwYIKwYBBQUHMAKGI2h0dHA6Ly9haWEuZW50 cnVzdC5uZXQvMjA0OC1sMWMuY2VyMEoGA1UdIARDMEEwNQYJKoZIhvZ9B0sCMCgw JgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAEC AjAZBgNVHREEEjAQgg5kYTIuYmFzZi1hZy5kZTAfBgNVHSMEGDAWgBQe8auJBvhJ DwEzd+4Ueu4ZfJMoTTAdBgNVHQ4EFgQUmHsMlC4tJNZYuHuiBIeeOhp1ru0wCQYD VR0TBAIwADANBgkqhkiG9w0BAQUFAAOCAQEAamjruB3QlyhkNiyPadH5U7LunCtR guE8weVNpr/bzmPllLzMcie8bTeQYZlLrtfst+ZqlB4PnK9n8gxgxGCgWYKcb+z0 Q05l9rUhoS3z+PdRd3wignAe/wdfXvwg9lCsYNxrKchfy/2b+Asze/s4bUDjG1OW NdFCVsSeIuBQZdmEjUpPMwneMtL7q/dsDPBLe4ksjyTStJKQ2Vg69Vkfeayy5NMq 94nwk35wk/WuJXmOzU/Wv8agakdFLvUijfgQF5qAbzlSvjaXSwrOvMUg9MyKHNxP LiTxH0Rl7dn98HGiUyK4waPhEVLw2CGJxm4TZ8QzId1nnqcfywxX7dt0qA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4u/c9baTEevXABAGIDN QoCxv2uyvFGhllM4meR80lJJcMJRjqfl5zD84by5Z6RC5VXUZonEOAKpKgUo9k32 1yBCA0txmFto3zGD3dQyZ0k3O8wQmuU8DOh5VK3pWbjcLXEIuC9t7RQt3qHXFFIn wMtVSFPR5opYmjBt/aRHxw4xfytIpaqnYbK/DNtTpAuEgxqm2m2vUsWPGrEIiiaA gCXLWDc0mTgwBWkoQFDdknzI/wja/onKQg7hVb25U79suRLGMuyQIcNaXyGK+Avq r8FN03mMPFMUS9FWTonamojD8/bTnw1TOdctGMhmvyiraUumeVK0BOmg2AI/59tD vwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1277157092 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-28 11:38:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-05-28 17:04:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF IT Services' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'da2.basf-ag.de' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21150709168141497710659495475237636541568159283371473380268228585755578462584369258656420814400204890371397990265860166795076573858585708725136342769249847720665590407922719735215569881210040767087859619161601098125740118305110870313331218339467359780969326296241684744127406800095648398254692672576170119800299524321389061079507541527418536286908071364817230964057637599243689972429145486270921728524346918554947745003362785907327470171709524141404028725017612520854569351254517248739313310278597044589984847393677115655070284080531473953030244563561853348372863955513866795318005998600988433310742532302846880859071 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da2.basf-ag.de' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 987b0c942e2d24d658b87ba204879e3a1a75aeed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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