afaria-test.basf-ag.de

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 46:55:7a:cd:d3:16:27:4d:98:c8:00:55 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: Rheinland-Pfalz
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 46:55:7a:cd:d3:16:27:4d:98:c8:00:55
Serial Number (int): 21767289307665231503478489173
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 58:e6:80:c7:9a:a2:8f:1d:3a:65:00:d8:b8:47:60:f9:43:f5:80:c8
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 20:c8:1c:04:e7:df:43:2e:d3:5e:47:fe:b1:55:a3:c6:19:c5:17:53
Fingerprint (sha256): 98:7d:b2:c2:0e:0c:2b:7d:fb:f1:26:23:c2:ae:da:a9:1b:94:61:78:dc:10:4d:07:df:e3:e2:71:0e:52:6b:d8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate afaria-test.basf-ag.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for afaria-test.basf-ag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

afaria-test.basf-ag.de
www.afaria-test.basf-ag.de

Other certificates including the domain name basf-ag.de

(limited to 100 certificates)
e-applications.basf-ag.de
voffice-partners.basf.com
e-applications.basf-ag.de
ultrasim.f206.basf-ag.de
qual-search.dmz.basf-ag.de
autodiscover.basfad.basf.net
ndes.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
eumobi01.basf-ag.de
e-applications.basf-ag.de
bgqr3.sslclient.cpicloud.basf.com
*.han-bnw.dmz.basf-ag.de
e-applications.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
e-applications.basf-ag.de
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
da2.basf-ag.de
vpn-eu.basf.com
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
afaria-test.basf-ag.de
afaria02.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
voffice-partners.basf.com
afaria02.basf-ag.de
U063SECURITY.PNU063AN06.BASF-AG.DE
m11r3.bcs.de
eumobi01.basf-ag.de
ecom-baslac-prod.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
afaria-test.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
da1.basf-ag.de
afaria-test.basf-ag.de
ultrasim.f206.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
autodiscover.basfad.basf.net
eumobi01.basf-ag.de
ndes.basf-ag.de
zftr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
e-applications.basf-ag.de
autodiscover.basfad.basf.net
qual-search.dmz.basf-ag.de
eumobi01.basf-ag.de
m11r3.bcs.de
eumobi01.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
afaria02.basf-ag.de
ecom-baslac-prod.basf-ag.de
m33r3.bcs.de

Certificate

The complete raw certificate details for afaria-test.basf-ag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy9K/faBa0EDwDrtpAwyd
yzxoxtQxImZZ7FTHRKT4rBbtDyWXnAqWN1SsvMy70G003wcC9Zur1TtTKZ5AhYX2
bSXWsd93Ls9mDwYfGtSgFG1UetlHy55E41Fz44oX4FnCr01wOgVCAe/KKM1A3J+I
KH6/5JnuNr2BpAqdpnfGLBWjma24vN7SkYA+EB16FqRQGL+gQ6Ehr3RrfyDM5vlX
d9mTF+2vPIqVx1P5Dg2ns+d3KzhDiiygwcn/f34rahyU9pCsR+P3Ve+kyKpIfDuC
gCFbCFYvM7Ph/pbFiiRKy+Hro9fPgSIbcDksGqKhskUKOsVM5LCjW7UiMMe9xgec
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21767289307665231503478489173
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 11:55:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-23 12:34:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'afaria-test.basf-ag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25730299625454618921457557164033814064864471166426550434816592492453022718284261287122418365535365606816679701552166603273109009978574099911170996503368260095253580185402039815209796511175374906547536747591388330042739393174912785891206298111534165946784389916215239724866974381675277138961410408561043926847457770699890248785331231052500004867285236329414908979826171484585842082270884176842124869786401308522034227911082016837034109244562067985742225733965750846477705101535950906442953010617056710187852123855969184668712035711822585085088320466878127628736111114695322230031106023437530164881365734861260441754661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afaria-test.basf-ag.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afaria-test.basf-ag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58e680c79aa28f1d3a6500d8b84760f943f580c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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