cheers4peers-uat.int.bayer.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:95:44:74:0c:c6:b7:87:6d:38:e1:75:fa:6e:66:81 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cheers4peers-uat.int.bayer.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:95:44:74:0c:c6:b7:87:6d:38:e1:75:fa:6e:66:81
Serial Number (int): 18055004575399549754039465743695636097
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 95:fe:cf:c9:74:1b:b4:08:59:8e:1e:c4:c6:37:e2:0e:7c:9d:95:dc
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 10:8c:d5:da:e5:b4:30:c3:e6:cb:84:98:dd:7a:da:ee:48:fc:24:ac
Fingerprint (sha256): 00:d1:6e:82:7b:bf:55:26:97:00:95:9c:12:84:79:93:0a:82:15:44:12:03:e2:58:2b:24:cf:a9:53:10:6b:52

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate cheers4peers-uat.int.bayer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cheers4peers-uat.int.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cheers4peers-uat.int.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
*.926611122902.cloud.bayer.com
*.genetic-data.509537612977.cloud.bayer.com

Certificate

The complete raw certificate details for cheers4peers-uat.int.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukAj6Ij/Mv5gpSVxlay8
wbZLVV3a/cx51HRVghmpnxXW5yXtIDy+olB6Y7rhPMWK6dHVbf2GE7O0nKdvyDXu
ilclbdfPQG7oytmupc88sotugrAoi2BdQw0ncIEKMW/OQ0YuV2fancfkkDp/xhuw
aiooIoW1uMVnJr+0OsUiOXaB1kDyyJ7aXaRZWi5Oljlvs/w8sgmA7YZjPfBC49P5
9IgxZi2uW8xaqCROObq1xBSy73BzneTH/apyc766ttU6hE5sN4SWpIsNJkioT+Zx
6Az/Kx1JdRK109Rd7fKjQHqpSk8c7ya3/npMqJ3VGzANEIjpLEkBfNhmID2mt4CL
UQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18055004575399549754039465743695636097
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cheers4peers-uat.int.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23511953468141721686628957962213612393076116591322109015365329392449141358636022604767535165241522770662265115125861793940435160630152734246947274866353842005205839427471727818326615373521944430615544220991713179516234147141168952881145816771468273716369048757215236717187458767235380760553332424863830891403111039299275367588909429339003331472373990482637170568214831949430393155640674384881606565625889252520175175887024845907872719744965375624894863394047338003347714949950282321523274154603799903156949201662142075554821159409089823617185881032341836988890736715642140783210531610429762891340184098462157743622993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							95fecfc9741bb408598e1ec4c637e20e7c9d95dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cheers4peers-uat.int.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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