eumobi01.basf-ag.de

- BASF IT Services -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1f:ec:bd was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

BASF IT Services

Organization: BASF IT Services
Locality: Ludwigshafen
Country: DE

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1f:ec:bd
Serial Number (int): 1277160637
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: bd:b3:bf:de:dd:ff:48:2a:7b:fc:8b:65:d0:86:6a:b4:25:58:b2:db
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 13:d7:5d:80:79:8c:27:0e:bd:82:47:0d:76:d9:10:a3:27:ff:84:d3
Fingerprint (sha256): bb:fe:8e:bd:82:9f:b5:38:3c:f2:09:50:3b:f4:35:66:bf:3d:9e:87:f6:39:8c:5e:02:34:e2:54:8d:f6:88:4d

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate eumobi01.basf-ag.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eumobi01.basf-ag.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eumobi01.basf-ag.de

Other certificates including the domain name basf-ag.de

(limited to 100 certificates)
e-applications.basf-ag.de
voffice-partners.basf.com
e-applications.basf-ag.de
ultrasim.f206.basf-ag.de
qual-search.dmz.basf-ag.de
autodiscover.basfad.basf.net
ndes.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
eumobi01.basf-ag.de
e-applications.basf-ag.de
bgqr3.sslclient.cpicloud.basf.com
*.han-bnw.dmz.basf-ag.de
e-applications.basf-ag.de
ldeluhvexeb2b01.vc.basf.com
e-applications.basf-ag.de
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
da2.basf-ag.de
vpn-eu.basf.com
zfpr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
afaria-test.basf-ag.de
afaria02.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
voffice-partners.basf.com
afaria02.basf-ag.de
U063SECURITY.PNU063AN06.BASF-AG.DE
m11r3.bcs.de
eumobi01.basf-ag.de
ecom-baslac-prod.basf-ag.de
autodiscover.basfad.basf.net
e-applications.basf-ag.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
afaria-test.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
da1.basf-ag.de
afaria-test.basf-ag.de
ultrasim.f206.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
pdeluh0001346.dmz.basf-ag.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
autodiscover.basfad.basf.net
eumobi01.basf-ag.de
ndes.basf-ag.de
zftr3.sslclient.cpicloud.basf.com
e-applications.basf-ag.de
e-applications.basf-ag.de
autodiscover.basfad.basf.net
qual-search.dmz.basf-ag.de
eumobi01.basf-ag.de
m11r3.bcs.de
eumobi01.basf-ag.de
ldeluhvexeb2b02.vc.basf.com
afaria02.basf-ag.de
ecom-baslac-prod.basf-ag.de
m33r3.bcs.de

Certificate

The complete raw certificate details for eumobi01.basf-ag.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgv85N0M2rQTcCGPOZ/q
0hHZKHvgdKFDza1sFEFV3vSN5Q7q9PbUBqB9J7lMfVpSk0lvVphBe/w3PBIEN2Of
Lyv7DUxTFpkYlCq62AwDs/H0z1jjv+Dohho1y7Z1Rr8Ry74Hfl1CJ2zeo5J8Zrds
r2t+o1VxcL8zpaom+367i63BhqZ6QW6oCXMiTV6lAwaoUV8KJGivZimR++8PAWtz
WosryAbJQY0OUAA7BZ3zi9AKGo8TH1qPehVcdOh+AUPjq7OBLKB+rXyCYIS7uDDN
2PwvQbonqUcrIeTE2mWr6g6whczM8ZFcSCjrbnTG8RpXRYhsGBVgyJAlC8hcRiWy
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277160637
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-06-03 14:06:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-16 03:49:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eumobi01.basf-ag.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20961470061994253017588999320089387860264799448095435655473874974375061423138347943379714305272196622798476649076456468039453528466928194099979340894697199246533920508706968301524843220344023197574628685744952099711788453001714886202764934794444638153273994009018476787255613409493376325758180606105180194443247131392999413048123144248130153546204300762033857534365685086028887781573796300013990693668720556799672551496473638581663216743620863219271360946869366257628440147003812803920234726396968657232792957633378426757012462045701387293802899171293858366094815681551389452550872865132657139228851863473435353395811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eumobi01.basf-ag.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bdb3bfdeddff482a7bfc8b65d0866ab42558b2db
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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