bodyshopmall.com

- BASF Business Services GmbH -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 3e:7c:7f:9b:43:8a:ed:8c:28:a4:c5:5d was issued on by GlobalSign nv-sa.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BASF Business Services GmbH

Organization: BASF Business Services GmbH
Organization unit: IT Security
State / Province: Rheinland-Pfalz
Locality: Ludwigshafen
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:7c:7f:9b:43:8a:ed:8c:28:a4:c5:5d
Serial Number (int): 19338580015211227682082964829
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4d:d5:2b:47:d5:a9:8d:8c:6a:07:0a:37:65:74:f4:4b:42:31:37:7f
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): c5:9c:af:d9:63:cc:8a:4d:e2:6f:0f:e2:15:aa:39:a9:04:c2:fc:e7
Fingerprint (sha256): df:16:95:2d:72:a7:a3:da:6f:c3:f8:37:34:60:3a:c6:0f:4c:ab:b6:59:59:bb:10:2a:51:b3:24:d8:50:52:d8

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate bodyshopmall.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bodyshopmall.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bodyshopmall.com
smartcolor-online.refinish.basf.us
smartcolor-online2.refinish.basf.us
visionplus.basf.com
www.basfrefinish.com
www.coatingsmall.com
www.visionplus.basf.com
www.bodyshopmall.com

Other certificates including the domain name bodyshopmall.com

(limited to 100 certificates)
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com
www.bodyshopmall.com
www.bodyshopmall.com
bodyshopmall.com

Certificate

The complete raw certificate details for bodyshopmall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19338580015211227682082964829
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-30 09:56:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-31 09:56:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rheinland-Pfalz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bodyshopmall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 767693810445886876371319944740680173498383065088265709969913123408221908484567934355032441419108860928349650955148798490617346745388431420214984413369041644390683214444073540491085805671642483521598413858802912444685377900153013791000844878336084917733427006100974079185106672836764468937534292864317089090758756213552218289636653434251756546866481772332229597289438830702747412696806709050203332951552290551452681253034335413426347129452462768044258446185287225169385587709590799341686348358816286191303472725589478421744253632708762747194630144999352068850996054254822438471795117961079308491393589063307523873048083256034374692807071619992378319745875998890752268758342267495510342869434752872444060760251290290116509589828405470940943262614459291045149786812262694623827418929021469145259818565860896164233150448061742899874235300234556851951301094254065768272439196104249894121163635973223281919404192014809771284056184533002323401883594558514538378658489787501309724943297931273196255188525731343907903277133058544149602240337649245842872573462907665572395306620941020212964310099239727608747260943803027723084106844047949475624399718813047982840833616806755276074953891088754331391935316180578060827851178437377173963947769547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bodyshopmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smartcolor-online2.refinish.basf.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visionplus.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.basfrefinish.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatingsmall.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionplus.basf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bodyshopmall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4dd52b47d5a98d8c6a070a376574f44b4231377f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d7000001739f26770f000004030047304502204e1bd3a1a9ee0e8ed22c8fdb44a60e7dd8954f7a29bb47c6ed402ef5acd9fafe022100d9e2aa18f9c4c9ab7831ea24dcfa1a06e5fd3230f13bc983202c74f36c37b51f0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001739f2676d40000040300473045022100aa2d2bbf7883b39dd9274af7bb1bb076e33b03a9903fa30cd053e8e7f884aa9a02203ab0a0ed856acf2243180d06d5fcc20f5acd0926f604660187ad470754411120
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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