zfcr3.sslclient.cpicloud.basf.com
- BASF Business Services GmbH -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 4c:ff:6e:a1:8f:f3:88:b5:22:33:e6:f3 was issued on by GlobalSign nv-sa.
With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BASF Business Services GmbH
Organization:
BASF Business Services GmbH
Organization unit: IT Security
Organization unit: IT Security
State / Province:
RLP
Locality: Ludwigshafen
Country: DE
Locality: Ludwigshafen
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 4c:ff:6e:a1:8f:f3:88:b5:22:33:e6:f3Serial Number (int): 23829659271035651869153421043
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 4a:13:d7:f6:7d:ab:d0:0a:2f:f1:d8:3c:24:bf:16:6e:0c:3c:b4:bf
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): f0:0c:ce:a0:62:28:67:2a:f4:d2:8b:6c:0b:e8:a5:48:7c:ab:d9:8d
Fingerprint (sha256): ac:ff:27:12:a4:8c:33:2e:da:c0:d1:13:27:32:a0:f8:64:ca:58:21:be:a0:52:5d:aa:b9:e5:a4:aa:04:e0:a5
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl
Check the revocation status for certificate zfcr3.sslclient.cpicloud.basf.com
6
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for zfcr3.sslclient.cpicloud.basf.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
zfcr3.sslclient.cpicloud.basf.com
zfcci.rz-c007-j650.basf-ag.de
zfcr3.bcs.de
zfcr3.basf.net
zfca00636.rz-c007-j650.basf-ag.de
www.zfcr3.sslclient.cpicloud.basf.com
zfcci.rz-c007-j650.basf-ag.de
zfcr3.bcs.de
zfcr3.basf.net
zfca00636.rz-c007-j650.basf-ag.de
www.zfcr3.sslclient.cpicloud.basf.com
Other certificates including the domain name basf.com
(limited to 100 certificates)
oase-connect.basf.com
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net
brandplace.agro.basf.com
ssl-vpn.basf.com
qa2.human-centric-processes.basf.com
mdm-selfservice.basf.com
*.master-builders-solutions.basf.com
dev.human-centric-processes.basf.com
enrollmentportal.basf.com
5739407210446848-fe1.pantheonsite.io
pact.basf.com
omega-3.nu
solucionesparapinturas.basf.com
ev-insights.basf.com
www.bodyshopmall.com
support9.cdnetworks.net
together.basf.com
www.newtrition.basf.com
pisar-qual.ap.basf.com
image.audi-hirlevel.hu
wsa.basf.com
nutricaohumana.basf.com
app.footwear.basf.com
prod.37.slot.cdn.salesforce-communities.com
demoplot-temp.basf.com
www.promoshop.glasurit.com
*.master-builders-solutions.basf.com
mypharmaregdocservice-test.nutrition-and-health.basf.com
support9.cdnetworks.net
mosys-test.basf.com
secure.basf.com
amflora.basf.com
qa.cdm.intranet.basf.com
mcyclo.com
development.federation.basf.com
5739407210446848-fe1.pantheonsite.io
agserv-qa.agqa.basf.com
5739407210446848-fe1.pantheonsite.io
recreate.basf.com
dashboard.ngba.basf.com
qa-workmanager.global.basf.com
secure0109.hubspot.com
securemail.basf.com
www.cdupdate.brandweb.basf.com
mcyclo.com
api.ebiz-dev.basf.com
zrm.basf.com
www.omacor.org
support9.cdnetworks.net
nutricaohumana.basf.com
maglis-qual.basf.com
public.maglis.basf.com
readz.com
support9.cdnetworks.net
www.proveedores.basf.com
digital-cockpit.basf.com
saturn.basf.com
login.symphony.basf.com
qa.members.basf.com
support9.cdnetworks.net
pharma.basf.com
prod.37.slot.cdn.salesforce-communities.com
orders.basf.com
teamplaces.basf.com
cls.basf.com
basotect-designobjects.com
dispersions-pigments.basf.com
projects.basf.com
akamai-san94.exacttarget.com
agriculture-pakistan.basf.com
voffice-na.basf.com
water-infrastructure-experiences.basf.com
connect.basf.com
clouddemocreator.basf.com
fresh-again.basf.com
crystal4-qa.basf.com
bconnected.basf.com
cds3.cvent.com
www.promoshop.glasurit.com
www.engenia-herbicide.basf.us
gastronomy-app.basf.com
image.comunicacion.diariosur.es
support9.cdnetworks.net
mcyclo.com
cds3.cvent.com
master-builders-solutions.basf.pl
support9.cdnetworks.net
water-infrastructure-experiences.basf.com
securecn.scene7.com
gabi-envision.basf.com
thinghiemvui.basf.com
www.basf.com
oase-connect-prod.basf.com
readz.com
www.basf.com
expertnetworkadmin-qual.basf.com
*.commerce.basf.com
support9.cdnetworks.net
akamai-san94.exacttarget.com
ssl-vpn.basf.com
support9.cdnetworks.net
Certificate
The complete raw certificate details for zfcr3.sslclient.cpicloud.basf.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIG6DCCBdCgAwIBAgIMTP9uoY/ziLUiM+bzMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MTcxMTUzMzRaFw0y MDA3MTAxMjAyMDdaMIGaMQswCQYDVQQGEwJERTEMMAoGA1UECBMDUkxQMRUwEwYD VQQHEwxMdWR3aWdzaGFmZW4xFDASBgNVBAsTC0lUIFNlY3VyaXR5MSQwIgYDVQQK ExtCQVNGIEJ1c2luZXNzIFNlcnZpY2VzIEdtYkgxKjAoBgNVBAMTIXpmY3IzLnNz bGNsaWVudC5jcGljbG91ZC5iYXNmLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBALkMpZaQILSyuGr6ZDLv7RhznRprbTNtGUvB6hy6T0wW5YC6l6h+ BWLzSgy9W/LEL3QCozv0qNN7LJuGlMupyF6wmEh+lxBIHpaqiH74I6zw4gMekcTq c/lN2GGvM+X80SceDRrM7ZGtRwfzKw2sR4PR88VB07ARG1PXZ5zgDAGGUUQoExCn SmuIFZZuJZddwpwQqU/yW28RwHz1u7kmWAXflJPJIwPKfa8b9Shw5dn3eaEY+Xa8 xz/SGJSw7/spgiow8s5K4CkIEObzgiJQ5FMFbHVo2KBczgWTZIQHIa93/eq8p4rg uRnxmOvCh/abjvLg68jLWEy41Io5UMShcopdC7rJ31RtvLVpgRykQvhdmoMNopLr tZR+DpwU01we8hOnbkJZ0UbSbQ2+QzS8DE9qqsX3lXYXGbtLliUoutTDHM3qezFI 9KWDQMmHNUlzAhT5X5q+EfO0QywOc/5Cmyhq0O7dOQIc308XudYU3w01F5JOMiHz ovoSFx0qbVpKVwT4N49olBTs10tMnjTvmIdZlyI/l//V72UDp4i/byDWLl7xuyqV blmM6Krw+MSqLae+RdDdibYDOzVfV7kxRa3qZ4hkwmekJgKhdJCYuUlz/yfa3d2i xxzcBgxCH2NMB+oRjFhb27ONssySUI0qR4UUCKYnkAPUvoorvPKOMkHZAgMBAAGj ggJ1MIICcTAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8wRAYIKwYB BQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzcnNh b3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5nbG9iYWxz aWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYBBAGgMgEU MDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9z aXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMD8GA1UdHwQ4MDYwNKAyoDCGLmh0 dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwgbUG A1UdEQSBrTCBqoIhemZjcjMuc3NsY2xpZW50LmNwaWNsb3VkLmJhc2YuY29tgh16 ZmNjaS5yei1jMDA3LWo2NTAuYmFzZi1hZy5kZYIMemZjcjMuYmNzLmRlgg56ZmNy My5iYXNmLm5ldIIhemZjYTAwNjM2LnJ6LWMwMDctajY1MC5iYXNmLWFnLmRlgiV3 d3cuemZjcjMuc3NsY2xpZW50LmNwaWNsb3VkLmJhc2YuY29tMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGH AwKz6zAdBgNVHQ4EFgQUShPX9n2r0Aov8dg8JL8Wbgw8tL8wEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGe5L/8Y3jDPDeEdMg/wmAsYI8bW 9xjWIQSz1F1Ew1+PJICQZlommhF2cgqIJTTZM8GR1mSk8Z7g+Bge32HE1JPiITkq s36n1SctOu778qKuoMTioQ5ImQZV27Su1erdSwnUgXpDzVlmHcMxM2K7VHqxresn PFD9kC2awiXKxoTH3JfNFbvGuq1io1jc/K2yhTWiGlUYvR3AP1zW1FAke+RL7EEi +7XmHqhaOZ7tQTGWKY14GZLCUsfWN9FuP2XIeOKpRQOw9Paq4tKsTpfK9AmuQMI9 21OaIEOF4lBHjXkr3E9DJfS4Lnl683+r1q+62BWyHmcz9arO7Zlkb2BQnmM= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuQyllpAgtLK4avpkMu/t GHOdGmttM20ZS8HqHLpPTBblgLqXqH4FYvNKDL1b8sQvdAKjO/So03ssm4aUy6nI XrCYSH6XEEgelqqIfvgjrPDiAx6RxOpz+U3YYa8z5fzRJx4NGsztka1HB/MrDaxH g9HzxUHTsBEbU9dnnOAMAYZRRCgTEKdKa4gVlm4ll13CnBCpT/JbbxHAfPW7uSZY Bd+Uk8kjA8p9rxv1KHDl2fd5oRj5drzHP9IYlLDv+ymCKjDyzkrgKQgQ5vOCIlDk UwVsdWjYoFzOBZNkhAchr3f96ryniuC5GfGY68KH9puO8uDryMtYTLjUijlQxKFy il0LusnfVG28tWmBHKRC+F2agw2ikuu1lH4OnBTTXB7yE6duQlnRRtJtDb5DNLwM T2qqxfeVdhcZu0uWJSi61MMczep7MUj0pYNAyYc1SXMCFPlfmr4R87RDLA5z/kKb KGrQ7t05AhzfTxe51hTfDTUXkk4yIfOi+hIXHSptWkpXBPg3j2iUFOzXS0yeNO+Y h1mXIj+X/9XvZQOniL9vINYuXvG7KpVuWYzoqvD4xKotp75F0N2JtgM7NV9XuTFF repniGTCZ6QmAqF0kJi5SXP/J9rd3aLHHNwGDEIfY0wH6hGMWFvbs42yzJJQjSpH hRQIpieQA9S+iiu88o4yQdkCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 23829659271035651869153421043 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 11:53:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-10 12:02:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'zfcr3.sslclient.cpicloud.basf.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 754935693831841195510287730424446968968797888615455706404965380830056947120121828557101050273268060623245701603526106126310016206368687260520970959210965241264093316880159179668093205295957709723520170004186878127980104102641483018719845531735809957716926023174353979925102543551954830658125403723542420563453545068031803638697073714245590541561056242632588509779324136579430001086130535225135860689974574800193786228634331943729238221949374211741055653310810947702471018357074713389544412396696637028606606313275409382155825681760483831790683035232482160300120563082658627712557944555876009194808344543818244792334846341061444908066415161079316323214422019234204717262122713364033564599201520333953200297678683542046313061405489725755200473549261763211406670157702863282646450006997258955633238510616366578899888948639991651717355292591803752888408224190942487196036161616703271341888541997823402345609187650803265501306234131005745006358481291782047090112619770405683066958278614755698243954588486897632355786861813882458094655259162002605457191270218188700430557028574588496701734676090582949630178549040107237944181612387229883576292940316663432538452271189582357396075390849424406158984623811031517721128396272836301915065303513 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfcr3.sslclient.cpicloud.basf.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfcci.rz-c007-j650.basf-ag.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfcr3.bcs.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfcr3.basf.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zfca00636.rz-c007-j650.basf-ag.de' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zfcr3.sslclient.cpicloud.basf.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a13d7f67dabd00a2ff1d83c24bf166e0c3cb4bf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0067b92fff18de30cf0de11d320ff0980b1823c6d6f718d62104b3d45d44c35f8f248090665a269a1176720a882534d933c191d664a4f19ee0f8181edf61c4d493e221392ab37ea7d5272d3aeefbf2a2aea0c4e2a10e48990655dbb4aed5eadd4b09d4817a43cd59661dc3313362bb547ab1adeb273c50fd902d9ac225cac684c7dc97cd15bbc6baad62a358dcfcadb28535a21a5518bd1dc03f5cd6d450247be44bec4122fbb5e61ea85a399eed413196298d781992c252c7d637d16e3f65c878e2a94503b0f4f6aae2d2ac4e97caf409ae40c23ddb539a204385e250478d792bdc4f4325f4b82e797af37fabd6afbad815b21e6733f5aaceed99646f60509e63