gesundfit.lemfoerde.basf.com

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 08:51:b3:04:eb:61:ee:cd:05:8b:cf:8a:39:52:e5:ca was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=gesundfit.lemfoerde.basf.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:51:b3:04:eb:61:ee:cd:05:8b:cf:8a:39:52:e5:ca
Serial Number (int): 11058030952899722544928473067881162186
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:bd:80:82:04:94:99:88:35:94:cd:ad:b0:e8:38:9c:82:da:42:be
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 76:d1:b3:ba:d5:6e:7b:84:3a:19:3b:cf:88:1c:9c:78:31:af:ef:2f
Fingerprint (sha256): 5f:19:ee:cc:67:d7:43:82:c5:fc:09:4e:4e:b7:8b:81:8b:b7:60:0f:e6:1e:56:cf:81:f6:06:0e:5f:5d:32:d5

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate gesundfit.lemfoerde.basf.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gesundfit.lemfoerde.basf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gesundfit.lemfoerde.basf.com
www.haus-breitnau.de
www.kauranat.de
www.keropur.com
www.m.agro.basf.com
www.ilevo.basf.com
www.hier-bei-uns-jobs.de
www.libertylink.ca
www.libertylinks.eu
www.kollidon.us
www.invigor.ca
www.ideltis.com.ar
www.harvest15.ca
www.luquafleece.basf.com
www.acresin.com
www.libertylinkrice601.com
www.ideltis.com.au
www.melanie-maas-brunner.de
www.hydraulan.com
www.juergenhambrecht.eu
www.kollidon.com
www.llrealyieldgame.com
www.melaniemaasbrunner.com
www.kollidon.eu
www.ideltis.fr
www.korea.basf.com
www.libertylinkrice.eu
www.ideltis.com
www.ideltis.us
www.libertylink.info
www.juergenhambrecht.de
www.invigor.us
www.lutrell.de
www.invigorcanola.us
www.libertylink.basf.com
www.hygiene.basf.com
www.liberty-link.de
www.llrice601.com
revxfield.com
www.ideltis.de
www.libertylinks.fr
www.libertylinkrice.fr
www.lutrell-combi.com
www.harvest16.ca
www.kurtbock.com
www.martinbrudermueller.eu
www.kurtbock.eu
www.martinbrudermueller.com
www.inhouse-consulting.basf.com
www.ideltis.ca
www.india.basf.com
www.japan.basf.com
www.libertylinkrice.de
www.jobs.basf.be
www.kauranat.net
www.igniteherbicide.com
www.invigorcanola.com
www.hohenzollernhoefe.de
www.llrice.de
www.martinbrudermueller.de
www.media.basf.com
www.libertylinkconnect.com
www.haus-breitnau.basf.de
www.hysorbsuperabsorbents.com
www.intermediates.greater-china.basf.com
www.hybridwheat.basf.com
www.leather.greater-china.basf.com
www.ideltis.in
www.investor.basf.com
www.m.basf.de
www.ideltis.co.uk
www.libertylinkhybrids.com
www.hohenzollern-hoefe.de
www.melanie-maas-brunner.com
www.igrasemillas.com
www.kauranat.asia
www.kurtbock.de
www.industrial-plastics.basf.com
www.hysorb.de
www.llrice.fr
www.libertylinks.de
www.juergenhambrecht.com
www.m.basf.com
www.kollidon.de
www.melaniemaasbrunner.de
www.ideltis.pl
www.ludwigshafen.basf.de
www.innovate-excipients.basf.com
www.ideltis.com.ua
www.kauranat.eu
www.lookatstoneville.us
www.liberty.basf.com
www.lampertheim.basf.de
www.kauritlight.com
www.homologation-poncho.info
www.llsoybeans.ca
emuldur.de
www.hysorbbasf.com
www.information-services.basf.com
www.llrice.eu

Other certificates including the domain name basf.com

(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net

Certificate

The complete raw certificate details for gesundfit.lemfoerde.basf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsDFYhdNFkcAgW5Y9JBB
O1oQyWcfaGlhufaMOFcTn5XXchVHAOmdvjO4+8MI0LcctB5ErXqw0LSzD1/KIpbn
xO11s5cQYa4WK/lEWpcp5jGMFulWwkIOgKaFmPBqTPDldH858QmGxHD1udaQRMrO
07OegvfKn020uTPyOzDEVp2qx9tkUoxm5BGvKC9fdv7+WIsRf2NlyqkR/F0cF5Lw
vY2VKC78d5re066QkILnxng7cUDAS5dx3pMKY0H5AiGbGB8lxZ9tXA3S1pOordJ1
hXYp+qQ28OzJ1T0WXCkVfGW6Ag2oRHDRPPpht9YHq1U8hwwdKT8swMhTvEldcUMD
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11058030952899722544928473067881162186
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gesundfit.lemfoerde.basf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16506038582389604291344157919834733743566982007383389079462579998519429093475151346297245047888025794925515981192818311877783947216281949939509075284490045131568454325253596380221545652682735186619914579293174941937305103680576868324169425579963858776270447547825888217813274274187565475412902440088225555743972908554580223489834053450691997256107828313462247877234272129081315359875241666949939019038087218672931587190880469548422572790279501220650189194433527534524519207007835783763233163375480093295410645585213724963291477845159025365171393175389582617103118713982644472800382064863958414080887688577723572356043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2bd8082049499883594cdadb0e8389c82da42be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesundfit.lemfoerde.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haus-breitnau.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.keropur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.agro.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilevo.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hier-bei-uns-jobs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinks.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kollidon.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invigor.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvest15.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.luquafleece.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.acresin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkrice601.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanie-maas-brunner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hydraulan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juergenhambrecht.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kollidon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llrealyieldgame.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melaniemaasbrunner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kollidon.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.korea.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkrice.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juergenhambrecht.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invigor.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lutrell.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invigorcanola.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylink.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hygiene.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty-link.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llrice601.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'revxfield.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinks.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkrice.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lutrell-combi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.harvest16.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurtbock.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinbrudermueller.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurtbock.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinbrudermueller.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inhouse-consulting.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.india.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.japan.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkrice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobs.basf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igniteherbicide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invigorcanola.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hohenzollernhoefe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llrice.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.martinbrudermueller.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.media.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.haus-breitnau.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hysorbsuperabsorbents.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intermediates.greater-china.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hybridwheat.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.leather.greater-china.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinkhybrids.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hohenzollern-hoefe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melanie-maas-brunner.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.igrasemillas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kurtbock.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.industrial-plastics.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hysorb.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llrice.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.libertylinks.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.juergenhambrecht.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.m.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kollidon.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.melaniemaasbrunner.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ludwigshafen.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate-excipients.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ideltis.com.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauranat.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lookatstoneville.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.liberty.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lampertheim.basf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kauritlight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homologation-poncho.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llsoybeans.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emuldur.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hysorbbasf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.information-services.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.llrice.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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