www.basf.ch

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 0e:4e:7d:12:68:cd:db:85:7b:ba:26:87:8e:56:56:a0 was issued on by Amazon.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.basf.ch

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:4e:7d:12:68:cd:db:85:7b:ba:26:87:8e:56:56:a0
Serial Number (int): 19016727855697227966272824807653791392
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c8:0d:13:39:ec:61:46:d2:84:05:05:1a:91:f7:fa:9f:82:d4:a6:15
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): 21:be:77:5b:95:6f:6a:b5:53:ed:d2:d4:5c:8d:04:c2:4a:a7:a5:de
Fingerprint (sha256): a9:50:dd:35:b3:07:2d:49:f0:3d:16:65:e3:d2:d4:d6:be:95:02:10:5d:6a:53:cc:15:00:54:31:d6:90:14:ae

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate www.basf.ch

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.basf.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.basf.ch
www.basf-new-business.de
www.basf-gmbh.com
www.basf.co.kr
www.basf.info
www.basf.mk
www.basf-service.com
www.basf-jobmarkt.de
www.basfse.de
www.basf.com.pt
www.basf-korea.co.kr
www.basf.co.th
www.basf.es
www.basf-pharma.co.uk
www.basf.vn
www.basf-3dps.com
www.basf-italia.it
www.basf.lk
www.basf-services-europe.eu
www.basf.co.tz
www.basf.dk
www.basf.lt
www.automotive-and-refinery.greater-china.basf.com
www.basf.lv
www.basf.tw
www.basf.co.ma
www.basf.co.uk
www.basf-schwarzheide.com
www.basf.ua
www.basf-new-business.com
www.basfs.com
www.basf-business-services.basf.com
www.basf-schwarzheide.de
www.basf.co.za
www.basf.kr
www.basf.net
www.basf-construction-solutions.com
center-for-sustainable-agriculture.com
www.basf.kz
www.basf-services-europe.de
www.basf.cz
myplasticadditives.com
www.basf.com.es
www.basf-sh.de
www.basf.rs
www.basf.co.jp
www.basf.ro
www.basf-business-services.com
www.b2last.de
www.basf.be
www.basf.bg
www.basf.se
www.basf.co.ke
www.basf.sk
www.basf.ie
www.basf.com.tw
www.basf.org
www.basf.ae
www.basf.com.tr
www.basf-it-services.com
www.basf.in
www.basf.ag
www.basfse.com
www.basf3d.com
www.basf.it
www.basf-3d-printing-solutions.com
www.basf-de.com
www.basf.at
www.basfse.info
www.basf-grenzach.de
www.basf.com.my
www.basf.pk
www.basf.pl
www.basf.com.eg
www.basf.hr
www.basf.hk
www.basf.pt
dirk-elvermann.com
www.basf.co.id
www.basf-ag.com
www.basf.com.bd
www.basf-tennisclub.de
www.basf.gr
www.basf.mobi
www.basf-catalysts-germany.com
www.basf.ph
www.basf.com.au
www.basfse.eu
www.basf-de.co
www.basf.no
www.basf.com.co
www.basf.nl
www.basf-deutschland.com
www.basf.co.nz
www.b2last.com
www.basf.fi
www.basf.fr
www.basf-services-europe.com
www.basf.com.sg
www.basf.com.br

Other certificates including the domain name basf.ch

(limited to 100 certificates)
plus.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
www.agrar.basf.de
agcelence.lv
www.findadblue.de
plus.basf.ch
www.agrar.basf.de
agcelence.lv
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.agrar.basf.de
plus.basf.ch
agcelence.lv
africa.master-builders-solutions.basf.com
www.agrar.basf.de
www.agrar.basf.de
rheologie.basf.ch
africa.master-builders-solutions.basf.com
www.basf.ch
plus.basf.ch
www.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
plus.basf.ch
africa.master-builders-solutions.basf.com
www.agrar.basf.de
www.engenia-herbicide.basf.us
africa.master-builders-solutions.basf.com
www.concept1865.info
www.agrar.basf.de
www.agrar.basf.de
www.agrar.basf.de
www.concept1865.info
africa.master-builders-solutions.basf.com
www.agrar.basf.de
agcelence.lv
www.basf.ch
agcelence.lv
*.master-builders-solutions.basf.ch
www.agrar.basf.de
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.findadblue.de
africa.master-builders-solutions.basf.com
plus.basf.ch
www.basf.ch
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
africa.master-builders-solutions.basf.com
plus.basf.ch
www.engenia-herbicide.basf.us
rheologie.basf.ch
www.concept1865.info
agcelence.lv
rheologie.basf.ch
plus.basf.ch
www.concept1865.info
rheologie.basf.ch
plus.basf.ch

Certificate

The complete raw certificate details for www.basf.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIM0jCCC7qgAwIBAgIQDk59EmjN24V7uiaHjlZWoDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTI0MDIxNDAwMDAwMFoXDTI1MDMxNTIzNTk1OVowFjEU
MBIGA1UEAxMLd3d3LmJhc2YuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQCraCP0fGKAX5ni9vIEkUv6FElIhthP/qlYAmgCMshYAYhY16IwdA1TcUUF
jqU33LQcyv3RU0sbAzxPZf84nbIba/y5ym5ScE4bds58uz+VJ/wxUAjxGMG8wvFm
wtq/1M9Z5BvQH61dv8rM2y8qtDCb27sgXtIWwXuTSo3lf6hD9KuCdjZNDaTkgB6v
t+3q6KwQi96Jn3r8im+3lc1BwHHNovW3gbvzoIxey/KMLX1YrtooRS+8Hn2/KYpu
PtWPfCqZWk+U4006gWVAsWlBsLe5nPjatOf/THAAZ3Q4dl3Z53P9Ufg1e2cz81Sa
88KlgMdcsaQq4saVL5kWF2rHHQk5AgMBAAGjggn0MIIJ8DAfBgNVHSMEGDAWgBRV
2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUyA0TOexhRtKEBQUakff6n4LU
phUwggciBgNVHREEggcZMIIHFYILd3d3LmJhc2YuY2iCGHd3dy5iYXNmLW5ldy1i
dXNpbmVzcy5kZYIRd3d3LmJhc2YtZ21iaC5jb22CDnd3dy5iYXNmLmNvLmtygg13
d3cuYmFzZi5pbmZvggt3d3cuYmFzZi5ta4IUd3d3LmJhc2Ytc2VydmljZS5jb22C
FHd3dy5iYXNmLWpvYm1hcmt0LmRlgg13d3cuYmFzZnNlLmRlgg93d3cuYmFzZi5j
b20ucHSCFHd3dy5iYXNmLWtvcmVhLmNvLmtygg53d3cuYmFzZi5jby50aIILd3d3
LmJhc2YuZXOCFXd3dy5iYXNmLXBoYXJtYS5jby51a4ILd3d3LmJhc2Yudm6CEXd3
dy5iYXNmLTNkcHMuY29tghJ3d3cuYmFzZi1pdGFsaWEuaXSCC3d3dy5iYXNmLmxr
ght3d3cuYmFzZi1zZXJ2aWNlcy1ldXJvcGUuZXWCDnd3dy5iYXNmLmNvLnR6ggt3
d3cuYmFzZi5ka4ILd3d3LmJhc2YubHSCMnd3dy5hdXRvbW90aXZlLWFuZC1yZWZp
bmVyeS5ncmVhdGVyLWNoaW5hLmJhc2YuY29tggt3d3cuYmFzZi5sdoILd3d3LmJh
c2YudHeCDnd3dy5iYXNmLmNvLm1hgg53d3cuYmFzZi5jby51a4IZd3d3LmJhc2Yt
c2Nod2FyemhlaWRlLmNvbYILd3d3LmJhc2YudWGCGXd3dy5iYXNmLW5ldy1idXNp
bmVzcy5jb22CDXd3dy5iYXNmcy5jb22CI3d3dy5iYXNmLWJ1c2luZXNzLXNlcnZp
Y2VzLmJhc2YuY29tghh3d3cuYmFzZi1zY2h3YXJ6aGVpZGUuZGWCDnd3dy5iYXNm
LmNvLnphggt3d3cuYmFzZi5rcoIMd3d3LmJhc2YubmV0giN3d3cuYmFzZi1jb25z
dHJ1Y3Rpb24tc29sdXRpb25zLmNvbYImY2VudGVyLWZvci1zdXN0YWluYWJsZS1h
Z3JpY3VsdHVyZS5jb22CC3d3dy5iYXNmLmt6ght3d3cuYmFzZi1zZXJ2aWNlcy1l
dXJvcGUuZGWCC3d3dy5iYXNmLmN6ghZteXBsYXN0aWNhZGRpdGl2ZXMuY29tgg93
d3cuYmFzZi5jb20uZXOCDnd3dy5iYXNmLXNoLmRlggt3d3cuYmFzZi5yc4IOd3d3
LmJhc2YuY28uanCCC3d3dy5iYXNmLnJvgh53d3cuYmFzZi1idXNpbmVzcy1zZXJ2
aWNlcy5jb22CDXd3dy5iMmxhc3QuZGWCC3d3dy5iYXNmLmJlggt3d3cuYmFzZi5i
Z4ILd3d3LmJhc2Yuc2WCDnd3dy5iYXNmLmNvLmtlggt3d3cuYmFzZi5za4ILd3d3
LmJhc2YuaWWCD3d3dy5iYXNmLmNvbS50d4IMd3d3LmJhc2Yub3Jnggt3d3cuYmFz
Zi5hZYIPd3d3LmJhc2YuY29tLnRyghh3d3cuYmFzZi1pdC1zZXJ2aWNlcy5jb22C
C3d3dy5iYXNmLmluggt3d3cuYmFzZi5hZ4IOd3d3LmJhc2ZzZS5jb22CDnd3dy5i
YXNmM2QuY29tggt3d3cuYmFzZi5pdIIid3d3LmJhc2YtM2QtcHJpbnRpbmctc29s
dXRpb25zLmNvbYIPd3d3LmJhc2YtZGUuY29tggt3d3cuYmFzZi5hdIIPd3d3LmJh
c2ZzZS5pbmZvghR3d3cuYmFzZi1ncmVuemFjaC5kZYIPd3d3LmJhc2YuY29tLm15
ggt3d3cuYmFzZi5wa4ILd3d3LmJhc2YucGyCD3d3dy5iYXNmLmNvbS5lZ4ILd3d3
LmJhc2YuaHKCC3d3dy5iYXNmLmhrggt3d3cuYmFzZi5wdIISZGlyay1lbHZlcm1h
bm4uY29tgg53d3cuYmFzZi5jby5pZIIPd3d3LmJhc2YtYWcuY29tgg93d3cuYmFz
Zi5jb20uYmSCFnd3dy5iYXNmLXRlbm5pc2NsdWIuZGWCC3d3dy5iYXNmLmdygg13
d3cuYmFzZi5tb2Jpgh53d3cuYmFzZi1jYXRhbHlzdHMtZ2VybWFueS5jb22CC3d3
dy5iYXNmLnBogg93d3cuYmFzZi5jb20uYXWCDXd3dy5iYXNmc2UuZXWCDnd3dy5i
YXNmLWRlLmNvggt3d3cuYmFzZi5ub4IPd3d3LmJhc2YuY29tLmNvggt3d3cuYmFz
Zi5ubIIYd3d3LmJhc2YtZGV1dHNjaGxhbmQuY29tgg53d3cuYmFzZi5jby5ueoIO
d3d3LmIybGFzdC5jb22CC3d3dy5iYXNmLmZpggt3d3cuYmFzZi5mcoIcd3d3LmJh
c2Ytc2VydmljZXMtZXVyb3BlLmNvbYIPd3d3LmJhc2YuY29tLnNngg93d3cuYmFz
Zi5jb20uYnIwEwYDVR0gBAwwCjAIBgZngQwBAgEwDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipo
dHRwOi8vY3JsLnIybTAzLmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jcmwwdQYIKwYB
BQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMy5hbWF6b250
cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDMuYW1hem9udHJ1
c3QuY29tL3IybTAzLmNlcjAMBgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSC
AXAEggFsAWoAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY2k
/lH4AAAEAwBHMEUCIQCE0i6cZ+bCFMRfkHv3LbAaYfxQQOJDuR4TEA+yM7vqWwIg
VsFkSXW67gPbYiAQ4tFhE8QI2qzvS7+QX8pww/+uX40AdwB9WR4S4XgqexxhZ3xe
/fjQh1wUoE6VnrkDL9kOjC55uAAAAY2k/lJBAAAEAwBIMEYCIQDYJY0+bmsrIHUx
4tAOFCl1VB/1tIfeixcAMQZkpRDMRAIhAJYzAknF/9uIKps2u/x8kEp+oFapgnvy
0+VLyln5GNmJAHcA5tIxY0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGN
pP5SZQAABAMASDBGAiEA2ja+J9pgJ7gZGN+6oQ5iPCNpxUBdRSUruYw3QG8Vu1QC
IQC0PfyN2M4xk2nx94xOB+w99kFwDs+z3T+LQuXOyODh/TANBgkqhkiG9w0BAQsF
AAOCAQEAYnhBMeMgLZRKKUoTh1Kt2zOj9wH9VK92aFQtBbqXjPboR+Vt5xQNN+E9
ImpwcN9NuZSLZS7kbw2S5wy2NjM2mfjh0W6vppCXGEJfcSnwwSXUNr4udrejOKZA
6cy+neRfAvc3sZlX83/zk/a9FfC2B7PXG3+pPFafr+99YTC5UuXlw3D6zaCLTo0U
SKBEVN9kvO7DzzNXUDSQ/o2QElBHcQRqMI6IV9Kavu1yGnCsZYDKBlTdqIOFG/yY
i1TM2oeUxL6vASZXjfUJwvqYAd0rEZThEKEZPBCsDmZmRIWravNtMrfj9OV9ve7E
exSMiDjX3z+I0MZRBSB0lu8oaSgJxg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2gj9HxigF+Z4vbyBJFL
+hRJSIbYT/6pWAJoAjLIWAGIWNeiMHQNU3FFBY6lN9y0HMr90VNLGwM8T2X/OJ2y
G2v8ucpuUnBOG3bOfLs/lSf8MVAI8RjBvMLxZsLav9TPWeQb0B+tXb/KzNsvKrQw
m9u7IF7SFsF7k0qN5X+oQ/SrgnY2TQ2k5IAer7ft6uisEIveiZ96/Ipvt5XNQcBx
zaL1t4G786CMXsvyjC19WK7aKEUvvB59vymKbj7Vj3wqmVpPlONNOoFlQLFpQbC3
uZz42rTn/0xwAGd0OHZd2edz/VH4NXtnM/NUmvPCpYDHXLGkKuLGlS+ZFhdqxx0J
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19016727855697227966272824807653791392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.basf.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21638103718723764209365742909326947794476064424808008028535205951776221677438559503044458213101312358087006627361720031044775794164842582771531799610996219738151830132725486071226696327572037474667541665908129505125122448925074658287243841727888192492156412008558385942954528248373832207761086445964008484235927809810831851761684765754547308154789521398372115143980133305832923414893026740314954296918694551690692078864970815948524327146884801159888399753379118226080852207850150867494142825761839651793756534495845242177989282813800583259814313712567535745104646487741266178864199560989292453822682946275124170262841
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c80d1339ec6146d28405051a91f7fa9f82d4a615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1817 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-new-business.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-gmbh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.mk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-jobmarkt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-korea.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-pharma.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-3dps.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-italia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.tz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.automotive-and-refinery.greater-china.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-schwarzheide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-new-business.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-business-services.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-schwarzheide.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-construction-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'center-for-sustainable-agriculture.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.kz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myplasticadditives.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-sh.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-business-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2last.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.ke'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ae'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-it-services.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ag'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf3d.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-3d-printing-solutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-de.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.info'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-grenzach.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.eg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dirk-elvermann.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-ag.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.bd'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-tennisclub.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.mobi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-catalysts-germany.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.ph'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfse.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-de.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-deutschland.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2last.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf-services-europe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basf.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018da4fe51f8000004030047304502210084d22e9c67e6c214c45f907bf72db01a61fc5040e243b91e13100fb233bbea5b022056c1644975baee03db622010e2d16113c408daacef4bbf905fca70c3ffae5f8d0077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018da4fe52410000040300483046022100d8258d3e6e6b2b207531e2d00e142975541ff5b487de8b1700310664a510cc4402210096330249c5ffdb882a9b36bbfc7c904a7ea056a9827bf2d3e54bca59f918d989007700e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018da4fe52650000040300483046022100da36be27da6027b81918dfbaa10e623c2369c5405d45252bb98c37406f15bb54022100b43dfc8dd8ce319369f1f78c4e07ec3df641700ecfb3dd3f8b42e5cec8e0e1fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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