www.bodyshopmall.com

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 05:cd:bf:0f:84:ab:5b:6c:e2:af:c1:22:0e:14:e1:e9 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
Locality: Ludwigshafen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:cd:bf:0f:84:ab:5b:6c:e2:af:c1:22:0e:14:e1:e9
Serial Number (int): 7714436004640133566888263361443979753
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:9a:81:54:ce:6f:9b:a0:df:8c:ce:6d:2f:a2:b4:87:80:51:e1:a8
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): a0:08:ab:b0:d2:6d:db:44:0c:a6:a5:32:c3:a6:ae:2e:0f:c4:8c:c4
Fingerprint (sha256): a6:21:a7:33:1d:0b:ef:04:c2:c8:9b:50:42:62:31:e4:83:50:f2:c7:bf:ce:f5:7f:43:a3:03:05:80:b2:71:2e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate www.bodyshopmall.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bodyshopmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bodyshopmall.com
bodyshopmall.com
smartcolor-online.refinish.basf.us
smartcolor-online2.refinish.basf.us
visionplus.basf.com
www.basfrefinish.com
www.coatingsmall.com
www.visionplus.basf.com
www.bodyshopmall.mobi
www.coatingsmall.mobi
www2.colorsourcemall.com

Other certificates including the domain name bodyshopmall.com

(limited to 100 certificates)
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com

Certificate

The complete raw certificate details for www.bodyshopmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7714436004640133566888263361443979753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bodyshopmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 672778156486125578064910963491160809602225463443840912872646783911578085633542223975003928489316281542234827437939730775629243620787588127641393133888175398910547535009364986030747521060434610780807306464330815938594203520627546895683684896928346077751695884904422567600841430333234707286517611008921510305174412027533227125170583289402605660015136354208513552374041986812281767648463631368961162063268005482809855181482956494572349486316871824260934865061961270041559818589526417955705066112677743316907315291522444025384001705232970357509920870620049882755189397636410367608748235307958672897591244826123072350209066597606763259497226029034664902092115158387317092557684133560986147948259331727106667503222870644723069940619780447954762158591124043399714867149212512981637230039830238589147385859634988885829388000948137905259586978066546484770851955315764269397547096523025916961770036645834498169946001680211840133073334240740173999257438299798702074427997385578860662669810175215417819511063544933312983122305920200226640874894518517907033845378086382936522280513017358651637303462610388995862066297253508773638842287916115209752971961584068541738146586852692179002290370954408702513322579771116394006523888370213579735243109453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d69a8154ce6f9ba0df8cce6d2fa2b4878051e1a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (279 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyshopmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyshopmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online2.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionplus.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfrefinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatingsmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionplus.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyshopmall.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatingsmall.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.colorsourcemall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003470d828240c4c2f7c8257c34fbc45fa8b7f82fa5851fe03451fa59ee1a70572a989b6659659f8367d7cf68d3d61b56402bdafe15ba1c6e49989961e547a0cfdaa3e69cc0ee30493a79051a827c1b7c478f8f12431dfeb59385efd80717d3187804bd06a6f64ca20f8045cec1ed8b7c27c815ce6b10355bc3cd3459c00e4fb8d0777f645d51d38525f65036679860251f5e3d601d3e52ceff1fbe75cb1e200bf6a6763eb76be5b89774c89265f0a99e83386d544be0143d884c78b7933aeb9492901bc3d66dd4b00649f8b633c28560bf7ed40f01fbe9e52c56733b0570ba0e9f77d78cbdad62d37c08bc71f6a3202a56757500ef2d9430e154e6a46ff36642d