auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 21:af:a4:64:07:9d:f6:da:12:f5:f9:a9:4a:d5:b8:7c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 21:af:a4:64:07:9d:f6:da:12:f5:f9:a9:4a:d5:b8:7c
Serial Number (int): 44776510051494431088541935380855109756
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e5:ac:d4:55:6a:9f:5b:37:26:fc:0b:5f:bf:f5:af:8c:b3:f5:ad:1a
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 0f:2e:d3:9b:1d:f0:65:04:e7:35:40:9b:ab:3c:13:40:f7:26:07:3f
Fingerprint (sha256): 01:54:3c:6d:c0:dc:ae:80:82:2a:06:c9:3b:08:a1:ae:d2:01:fd:1c:45:06:4f:f1:0e:c3:dd:9c:77:e7:b9:cd

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/JmJ4i6MFNcY
CRL Distribution Point: http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl

Check the revocation status for certificate auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
www.cteph.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
www.aspirin.hu
syreon.org
shareholderservice.bayer.com
staging.ch.api.int.bayer.com
partneryourantibodies.bayer.com
www.complianceposter.bayer.com
registration.diabetes.bayer.com
email.es.bayer.com
idnet.bayer.com
akamaisecure7.qualtrics.com
efield.bayer.com
entitlements.p3002010-dev-4cca-rdl-calantic.on-gcloud.bayer.com
portal.on-gcloud.bayer.com

Certificate

The complete raw certificate details for auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18CDErymnDHBoseWgnrv
o4velJCaWtZmzqYZHW5Hrk8DxpcRE2JNo2yIuwylsenXtNkcXde4sMmJ4ZeJnQg2
AGGqxw8EG3IRScWgW4T+7zzSYpEQDwj1lT1DxR4VKFo8BHQUwyDrrRBoXL/zxxrc
DxmOD93+wOrP/IBRBJzXnKv9n/tTSZyCGUV1L9S8J48X3h9ExPgeqhm66seZVfsB
P/11bNYNaTeK1Xsem8VAsiV47kYW7rdYs4tSmBPgsfizgMl8Q44KbMnfwYexcsel
zxiJVuOXDRloLSXiLIq/rDY7nxYOn0y0CCa9t/tx3QFDcy2N79vdPnAjH6CfKDj8
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 44776510051494431088541935380855109756
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 13:58:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 14:52:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27236166775331396114590654813268604826465629562805413479489277924737236664526985007452942341178833292682570794158279301823598753646056985438328939804050590571014706772063752956280484053443406934321065032921226736694169388654374775953044311308128549531824425395651140557989600900678130094918870219069920806006209768239125277067101043044685134010156836479075465733001458854196917071642026341661210982967600303316348935900647687232517279892550875971334325252187647268583107617933385703900337231264750196734422889939403801872826668893345344637683659901059685656368194133035713744352734790909198155505817866245239243078869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5acd4556a9f5b3726fc0b5fbff5af8cb3f5ad1a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/JmJ4i6MFNcY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/EST6rpoTEPY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b95b1b4f70000040300483046022100bff1e1710d29cc631185698f83c0bfd25aa697dc3b59968731eab990c301c0ed0221009867424775cc7b6b1fc6acb94890ac9a3d2f648ae76f1948fc7e2907580c880100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b95b1b51c00000403004730450220619c80900a977b1460dbe81089d904ff91d9715f8c88a96bd78a2b80cf1746b0022100bc53c030b3a764635845c403bf6803c5a84161ced832b4dbdf02197f2e3620f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a4241b7330ef0412a12bbf69a42686f3f325f4bae36685b00fd9be5bb3a35142a0cd007b08589d14ae584a0e2f7f0920832fb36cf348754b291813f075de89ef6e165d8c5635c05e1c64ab33d9d5c65c7f5a8a8493dfba2003db28cb439e320891cd634d163270418693ed35f317a565a4e01b172b68f6310b5fcb7b6089f193a0afb78d690548bf20c57f25aa2fc62d241c3b68feab8de3709de216dbf7bfbf541b8352c567d18219ed9a977390672dc338a78bd528783ae89137532dbcda2d8f4ff2b8e66e2924af3a254e9c6b4fae6b40a0db1a863d119c0e8e0d917b1f88c2456107f404979b501e054a1c782b335f2a10467688c2ea65d22e7568fdf3af