z5ccstore.bcs.de

- BASF Business Services GmbH -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1a:a2:3f:45:10:04:63:fc:e0:b2:bd:86 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: RLP
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:a2:3f:45:10:04:63:fc:e0:b2:bd:86
Serial Number (int): 8242755021200460929020640646
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 76:c7:8e:fc:a9:ff:95:54:31:6c:37:1b:b2:a4:7c:17:36:1f:30:a2
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): ed:3a:07:7a:be:b5:14:75:95:05:6e:61:c3:ed:32:77:07:b8:2f:b4
Fingerprint (sha256): d3:26:93:50:94:78:57:e2:43:3a:18:ac:25:a1:50:c3:f2:5e:e3:9d:4c:7e:a6:e5:20:8f:b4:9a:dc:1c:22:23

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate z5ccstore.bcs.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for z5ccstore.bcs.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

z5ccstore.bcs.de
www.z5ccstore.bcs.de

Other certificates including the domain name bcs.de

(limited to 100 certificates)
z5cdpde1.bcs.de
bcpr3.bcs.de
z5udpde1.bcs.de
z5ccstore.bcs.de
bcpr3.bcs.de
bgqr3.sslclient.cpicloud.basf.com
m11r3.bcs.de
zfpr3.sslclient.cpicloud.basf.com
zfpr3.sslclient.cpicloud.basf.com
z5udpde1.bcs.de
z5ccstore.bcs.de
m11r3.bcs.de
bcpr3.bcs.de
bgpr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
bgdr3.sslclient.cpicloud.basf.com
zfcr3.sslclient.cpicloud.basf.com
vm-system-sport.bcs.de
zfcr3.sslclient.cpicloud.basf.com
m33r3.bcs.de
zftr3.sslclient.cpicloud.basf.com
m11r3.bcs.de
z5udpde1.bcs.de
hrprod.bcs.de
z5ccstore.bcs.de
m11r3.bcs.de
m33r3.bcs.de
m33r3.bcs.de

Certificate

The complete raw certificate details for z5ccstore.bcs.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAtCWgp/EhuQ0gZOa98qG8
ejDZZzJGGnoypYVR1dU2jinljoSJbpy+uATYUdCz6DKgwVFb4tgfwXyGZ2HcM3AQ
L+XorZ8J7DkHrbdtpZ/EaJg6VU4YPva/c6PFs9x29P9bD+w5WFlhJeoKG1C2TRq7
MAH+g5FPbSwR+mQ8Grt61cW1k5pcJ5TBr/vBSz/7lVytzWPG751DHBDv0kasF2Co
hZTsUp+QHvmfOgPw/v0zXLVDEhzqbWGhiuR8GT9Il+SHu75vS+RJ8y16AmLQbY8i
AOBqkEWi2pNBPJi7VfLbWdsWJm+bVPuWhHpYr5kR5VDi52kXkyCYv46+kRJ/wePz
l6FF9ukm2E5Z3FVW5Dz6k2gU5/FDdL390wQ+0XhXZ6DswhfoD9UWnToIhkhb3kYZ
O+yD0rp110tUlkykISKD8VuhC4v5wxWHc1VhO6MybNWLXZpdeIVgpuyQ+TZLWmcK
LotJu/TgAEWCFspTWG+fKbsXUpmztOTbwiFsRdHLir4d7iF9/95oDxWLG8OGxzoz
EjPwTDoUfdll6cqa5vgl5N9L3xBy0V1Oa2efs6bf6hOoHVvfNt7PvraL6MU3k9cM
K766jTRWmfS+ue5z8+u2Ldtc2c6V5n0VmNOcpF4N77pVGtPryAbhIB3K6VRudXXg
iJ3MPoYGV8ela4KfiPN8kucCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8242755021200460929020640646
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-08 09:59:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-14 08:22:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'z5ccstore.bcs.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 734935569206575024850204733527236665297394024326066946002164465957060813113029408156766172842034487837906881544646083089368311182626166907746954467994288930153696416985667728527278919972362917148193734589376202326309844938358713242244449542311558571899923761919808542228548530425245643679240717703445347570338801653184322189438640564842062799306052367199211776635648598287129084729502877068092267305563283009600069387267852890458177011980913433280235720090204441419806476104961179824817917033670495786349795843829449768608608185293618823777662526380924588260659896932588856685496446204648438215502271223746305008577180113518858718611324842826060245709744000102839402724843801479070915110193252114490171828845469965981326911801026523201645062718690182255148692073651858851083431711954181223708270292791518810825694736841569875886446334475454139909140180998826485439153427472783753816629007733887737635908487800538664148978583129110344681997289167675365736942288419724528026863626808571909601296594962591298453549874819285119240219213263813848922892515146759407595955841345461751319497479359015603969341337682513720480208599771314458255694732572934688838526519472022036461138768208708527197765812020200690081406396055544755545844781799
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'z5ccstore.bcs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.z5ccstore.bcs.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76c78efca9ff9554316c371bb2a47c17361f30a2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009ba2fc70f03304db91939b9750941a3aadafe2872aeb5974d21bae9e671ffcb13159e1f70a20e23fa1661e49a926dd79ccde422bacf4fe29917e35521cc4b6aefae4ebe8c1a3b91a292bf62506ef125792ff34414ef19f4a6654291de81b99a5f774c013ade7f6030ef899878af17f65bcf15c776a1c59ef16cdb45d4fbf2fa46c8ab4f1c4f5894d21eac6ce5abc9effa1d1c3d8daa9c3ef90adfb1ae5950eaa24be3aabacf936dbb2d7a421507a210a86a4d6253a67b3e1fd9c2614e5f9eb8dca1fafc765123939bc5e21c334b14ee50482423f1955ac5010a65f85204aebff3aafed580c960f5481ead33225d9c2091c12b87570b34c29ad14007f7988ad9