www.baslac.com

- BASF Digital Solutions GmbH -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:c8:02:cd:d6:4e:bf:bd:89:06:95:47:e7:7a:f9:2d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Digital Solutions GmbH

Organization: BASF Digital Solutions GmbH
Locality: Ludwigshafen am Rhein
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:c8:02:cd:d6:4e:bf:bd:89:06:95:47:e7:7a:f9:2d
Serial Number (int): 13001568206688724893374804564566014253
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 7a:e0:03:50:96:d9:92:71:e5:45:d9:3c:6c:45:7b:e6:6a:6c:4f:10
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 5e:21:7a:72:de:37:5b:4a:28:5e:03:ba:d8:ba:db:b2:1c:d1:d9:5c
Fingerprint (sha256): aa:54:ce:89:3b:f7:f0:73:07:c0:40:9d:15:5d:fd:8a:ac:5c:bb:81:70:1e:8c:e8:ea:eb:de:ea:72:28:a2:fc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl

Check the revocation status for certificate www.baslac.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.baslac.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.baslac.com
baslac.com

Other certificates including the domain name baslac.com

(limited to 100 certificates)
www.promoshop.glasurit.com
www.baslac.com
www.promoshop.glasurit.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
basf-cis.com
techinfo.baslac.com
www.baslac.com
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
color-online.glasurit.com
*.basf.com
baslac.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
www.promoshop.glasurit.com
color-online.glasurit.com
www.baslac.com
www.baslac.com
color-explorer-prod.rmpaint.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
color-online.glasurit.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
techinfo-test.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.baslac.com
msds.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
*.basf.com
color-online.glasurit.com
color-explorer-prod.rmpaint.com
basf-cis.com
*.basf.com
msds.baslac.com
basf-cis.com
color-explorer-prod.rmpaint.com
techinfo.baslac.com
msds-test.baslac.com
techinfo-test.baslac.com
color-explorer-test.rmpaint.com
color-explorer-prod.rmpaint.com
www.baslac.com
techinfo-test.baslac.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
www.promoshop.glasurit.com

Certificate

The complete raw certificate details for www.baslac.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOKXzKWudpg5W49qidu/
Ul8BUGf/3bAt5QNf7A4csbS7GKt5Iz1jQbiDcufeDM1xG0zsjNKJZT6rccTXNBaX
rZFCsWRqK7v45o5b+imkhDwlxt/vqhdP2w5tcRS2lPWxmAwbPMeW9XsLzrggKl8V
ioHO5yw4MHs0HwGX6yR//X1RCnVCy+EkJg3a0jYnGgs3u/t/DTMjZtiUhcPnFecX
P7Nw81ZZ9cSnuQVokV5I7Jof2sx1tEBtakzP0REs4mWHls7+W/Ov7TE+Tmw+F2iC
Gu2UyO5cgfnPUq27QB5Ws/uPUMMf5JH+CD014Qwr061g/woqFf5rM2wKwCGrEt2O
TQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13001568206688724893374804564566014253
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen am Rhein'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Digital Solutions GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baslac.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21824725610403818364821130196880386627291296539572495137560603043475560188158170362460057631099719462720740233764060125287384277652802838154230067418564068171794926867276370944786105758266414078621411620247493509027581509135108165612983374157061556200881344669090707719389788872078220277098955558038532553356167128600715832636647188953834313597151651447811206990696897962542441039312095985836790636107116727520106482926604426990174239316211864138933064420198385679810244377809838319616049530185863905157700048265400432523661251461204371998541115230359409659399959662712523398313670454370911143483774624410475524099661
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7ae0035096d99271e545d93c6c457be66a6c4f10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baslac.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baslac.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00aea3860217ed6442b4b2e231ad74e1b6a69ac1c899cf31cae46c63c3066da5b61d464b7d64fca12e0382bd2f12bd3640e9900831495431f9383b53faa91f0879c29decebbb6dc1102de1273dcb8903b1c0a220751f2e0f1275ecf72178c55b01d98300379115a2ef56ad398b37add2bb6a28e9515df7b82e241aa17b859d33c9baa44271ca7e5debb0f967bfbc219b07df903e9e64a8ad4349af2fd9f77f93133181a2eda183e43a787e492ae82b77fe201e68458dfedfab022ca60ef82e71e89b3743023d6c176b4e23522035181d6cf96d88c37fc24929b9af248d85013e64115bd37effab224d44dc6572d4118c9b6eb3df85c5fdfcffea60e8ce4aea3935