www.baslac.com
- BASF Business Services GmbH -
Issued by GlobalSign Organization Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 5b:1d:62:20:45:57:fa:0d:9f:89:34:e0 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BASF Business Services GmbH
Organization:
BASF Business Services GmbH
Organization unit: IT Security
Organization unit: IT Security
State / Province:
RLP
Locality: Ludwigshafen
Country: DE
Locality: Ludwigshafen
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 5b:1d:62:20:45:57:fa:0d:9f:89:34:e0Serial Number (int): 28198658129719094331967091936
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 4a:75:ad:dc:b4:2f:0b:b3:68:35:d3:b9:c0:0b:ff:6a:b7:1b:4f:5e
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c
Fingerprint (sha1): 0f:ad:01:6c:f0:a5:db:f0:d5:30:e9:90:13:d5:bf:fc:2d:54:1f:0a
Fingerprint (sha256): f5:30:ac:0c:c6:bf:a0:b4:64:ab:d9:2d:98:87:19:e7:50:66:10:41:db:73:ef:63:40:25:f8:31:46:9a:b0:b3
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl
Check the revocation status for certificate www.baslac.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.baslac.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.baslac.com
baslac.com
baslac.com
Other certificates including the domain name baslac.com
(limited to 100 certificates)
www.promoshop.glasurit.com
www.baslac.com
www.promoshop.glasurit.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
basf-cis.com
techinfo.baslac.com
www.baslac.com
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
color-online.glasurit.com
*.basf.com
baslac.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
www.promoshop.glasurit.com
color-online.glasurit.com
www.baslac.com
www.baslac.com
color-explorer-prod.rmpaint.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
color-online.glasurit.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
techinfo-test.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.baslac.com
msds.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
*.basf.com
color-online.glasurit.com
color-explorer-prod.rmpaint.com
basf-cis.com
*.basf.com
msds.baslac.com
basf-cis.com
color-explorer-prod.rmpaint.com
techinfo.baslac.com
msds-test.baslac.com
techinfo-test.baslac.com
color-explorer-test.rmpaint.com
color-explorer-prod.rmpaint.com
www.baslac.com
techinfo-test.baslac.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
www.promoshop.glasurit.com
www.baslac.com
www.promoshop.glasurit.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
msds-prod.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
basf-cis.com
techinfo.baslac.com
www.baslac.com
basf-cis.com
msds-test.baslac.com
basf-cis.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds.baslac.com
*.basf.com
color-online.glasurit.com
*.basf.com
baslac.com
techinfo.baslac.com
www.promoshop.glasurit.com
msds-prod.baslac.com
*.basf.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-prod.rmpaint.com
www.promoshop.glasurit.com
color-online.glasurit.com
www.baslac.com
www.baslac.com
color-explorer-prod.rmpaint.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
color-online.glasurit.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
techinfo-test.baslac.com
www.baslac.com
color-explorer-test.rmpaint.com
www.baslac.com
promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
color-explorer-test.rmpaint.com
www.promoshop.glasurit.com
www.baslac.com
msds.baslac.com
www.promoshop.glasurit.com
www.promoshop.glasurit.com
*.basf.com
color-online.glasurit.com
color-explorer-prod.rmpaint.com
basf-cis.com
*.basf.com
msds.baslac.com
basf-cis.com
color-explorer-prod.rmpaint.com
techinfo.baslac.com
msds-test.baslac.com
techinfo-test.baslac.com
color-explorer-test.rmpaint.com
color-explorer-prod.rmpaint.com
www.baslac.com
techinfo-test.baslac.com
ecom-baslac-prod.basf-ag.de
www.promoshop.glasurit.com
www.promoshop.glasurit.com
Certificate
The complete raw certificate details for www.baslac.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHWjCCBkKgAwIBAgIMWx1iIEVX+g2fiTTgMA0GCSqGSIb3DQEBCwUAMGYxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g RzIwHhcNMTcxMjA2MTMzODU1WhcNMTgxMjE2MDY0NzM2WjCBhzELMAkGA1UEBhMC REUxDDAKBgNVBAgTA1JMUDEVMBMGA1UEBxMMTHVkd2lnc2hhZmVuMRQwEgYDVQQL EwtJVCBTZWN1cml0eTEkMCIGA1UEChMbQkFTRiBCdXNpbmVzcyBTZXJ2aWNlcyBH bWJIMRcwFQYDVQQDEw53d3cuYmFzbGFjLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBANWFzuWENvPhXuQ+jHu+xg5cwkiKK1wRUhNh6niXHKLmCqYQ iCAXAzQsMwSWNRh90vEZQiMo7jShd7MSmhwVTjkTh4UH87DMC6AO/Be7BLvfatHL ElygmZoFG/+JnSu+S9LOKHmGsJgEksQTLskG0/oCIbI1DFr5FZxWX+h0VzCWIGme kK9QRVMWhL9jDXKTaoXYDnzjY45MTGHqC7uA6mfM64hJOzPX9oRke273vqhzu4// 1Hwhii68EzN1nyqj8wZtTAE2W3Ej+smcvwNJvR2rORcSYBd3302c7iJmHvenq0SL FB9+LW+FygWFm/iDBuSC2Wbg57rZj9d4G64zfGUCAwEAAaOCA+QwggPgMA4GA1Ud DwEB/wQEAwIFoDCBoAYIKwYBBQUHAQEEgZMwgZAwTQYIKwYBBQUHMAKGQWh0dHA6 Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFs c2hhMmcycjEuY3J0MD8GCCsGAQUFBzABhjNodHRwOi8vb2NzcDIuZ2xvYmFsc2ln bi5jb20vZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEE AaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20v cmVwb3NpdG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQCMAAwSQYDVR0fBEIwQDA+oDyg OoY4aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZh bHNoYTJnMi5jcmwwJQYDVR0RBB4wHIIOd3d3LmJhc2xhYy5jb22CCmJhc2xhYy5j b20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRKda3c tC8Ls2g107nAC/9qtxtPXjAfBgNVHSMEGDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYa fDCCAfUGCisGAQQB1nkCBAIEggHlBIIB4QHfAHYA3esdK3oNT6Ygi4GtgWhwfi6O nQHVXIiNPRHEzbbsvswAAAFgLAz8jgAABAMARzBFAiAkaI/vtqU/3Au09i41PUw/ 2tjPOorqLrDKPiJF6OHBiAIhAN0mQ1057F093KCoK6CRt7x0Y4Ok5bZY4jg+kaPD yak+AHYAVhQGmi/XwuzT9eG9RLI+x0Z2ubyZEVzA75SYVdaJ0N0AAAFgLAz9IAAA BAMARzBFAiEA0xg39IrHdphcISzHnBOrvEpT0IXS2VRm8pEeJuP/qcsCIHiFX721 0R43pr43OAOp6x9k7s/rxoZjwE5fiuqCWNEmAHUApLkJkLQYWBSHuxOizGdwCjw1 mAT5G9+443fNDsgN3BAAAAFgLAz88gAABAMARjBEAiAY3mIWC1NcU52F1yfoWycY L75a5p8kLkdhEuRAHl4iWQIgTBtLhl4PvZuoGlyp+1+2gmoVu0iS3MBzXPvcd9yg CpwAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWAsDQbrAAAE AwBHMEUCIQDHO0CD/YYzV6qI1sMRGk/aJp756TKvU2NFAeepTrm2qAIgFyphNpdY 9ycSBf1zr+Cv0xcfcQTmPO7LePWA0vfoUGYwDQYJKoZIhvcNAQELBQADggEBAD2I FhCaXCUCLc2v32VE1E9WoqiJpFSwlhLYd4WAdlENnvbQYtltuuuernC2HRAp75tP C7wgXhv9scU4bCyIxzRRWH8KXTEcwZF2XN6i4ZpMYMVinhm4tK1YD5JE5dEisl1H QvEG2ePxwFUuB100L47lfQph9C1iqIAYFaPuIRpdArnA2rQkyvgI7/jkjq7SALzU Bv2D6zZZwHw0ruT5y2lbtxn3zO9y6shGYRJss8jPx4MlU/Y5KSCC11+Ao+QUp+Tk nlHG7PgVt7SXOc2y8E/eWZKSaEniM9AdGG3Z9B8BpFxpxkDqUteKFfMj/5/5+OMO ySyjdJRfPahjww945tQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YXO5YQ28+Fe5D6Me77G DlzCSIorXBFSE2HqeJccouYKphCIIBcDNCwzBJY1GH3S8RlCIyjuNKF3sxKaHBVO OROHhQfzsMwLoA78F7sEu99q0csSXKCZmgUb/4mdK75L0s4oeYawmASSxBMuyQbT +gIhsjUMWvkVnFZf6HRXMJYgaZ6Qr1BFUxaEv2MNcpNqhdgOfONjjkxMYeoLu4Dq Z8zriEk7M9f2hGR7bve+qHO7j//UfCGKLrwTM3WfKqPzBm1MATZbcSP6yZy/A0m9 Has5FxJgF3ffTZzuImYe96erRIsUH34tb4XKBYWb+IMG5ILZZuDnutmP13gbrjN8 ZQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 28198658129719094331967091936 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-06 13:38:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-16 06:47:36 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RLP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ludwigshafen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Security' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BASF Business Services GmbH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.baslac.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26954742235314031472104113209924880228455841213329284092361761509245706855114901281105180429101874997007638908329329736502379430700456084512416510536695886848614761471096296917949386717095242559468041269589003859501389018669273603656608853858012738801422187590119226633050544450074130422333301121974231334851595648098189149913317052231355511681147862501643885522511833803956733465142234967801860677292476860634927034196621388707652580612045482607198436892141352426937103075348728785558102297779032424268423856390919082231197812394856489843210201567681965597876127045498634806550637859332679657745912040554060215188581 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baslac.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'baslac.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a75addcb42f0bb36835d3b9c00bff6ab71b4f5e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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