www.bayer.cz

- Bayer AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number bf:d0:a2:6b:a9:77:a7:0e:75:1b:a4:07:b4:a5:1e:8f was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer AG

Organization: Bayer AG
Organization unit: Bayer Business Services GmbH
Organization unit: Enterprise SSL
Address: Kaiser-Wilhelm-Allee 1
Postal code: 51368
State / Province: North Rhine-Westphalia
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bf:d0:a2:6b:a9:77:a7:0e:75:1b:a4:07:b4:a5:1e:8f
Serial Number (int): 254965839221710974202491326142708260495
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:b2:48:92:ad:8d:12:e1:cb:ff:28:a2:21:7c:2f:be:06:11:ee:16
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 0a:4f:e9:e3:60:bd:c4:96:31:2d:d9:ed:02:30:4c:11:41:ee:05:41
Fingerprint (sha256): 02:78:24:15:e0:e0:09:b6:1b:33:78:7f:c2:5d:bd:a6:b6:b3:aa:34:a1:03:71:3a:35:87:ba:91:f2:14:f0:62

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.bayer.cz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bayer.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bayer.cz
bayer.cz

Other certificates including the domain name bayer.cz

(limited to 100 certificates)
bayprofit.bayer.cz
sanssl11.bayer.com
www.bayer.cz
new.bayerscheringpharma.cz
bayexpert.bayer.cz
hcp.nubeqa-us.com
sanssl13.bayer.com
sanssl13.bayer.com
sanssl20.bayer.com
www.canwelivebetter.bayer.de
bayer.cz
sanssl11.bayer.com
sanssl9.bayer.com
bayer.cz
fakturace.bayer.cz
bayer.cz
sanssl13.bayer.com
bayer.cz
sanssl13.bayer.com
www.cropscience.bayer.com
xarelto.com
fakturace.bayer.cz
crop.bayer.com.au
expertclub.bayer.cz
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.canwelivebetter.bayer.de
bayer.cz
sanssl13.bayer.com
www.radiologie.bayer.de
www.bayer.cz
www.canwelivebetter.bayer.de
fakturace.bayer.cz
www.cropscience.bayer.com
fakturace.bayer.cz
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
fakturace.bayer.cz
xarelto.com
new.bayerscheringpharma.cz
sanssl9.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.canwelivebetter.bayer.de
www.canwelivebetter.bayer.de
xarelto.com
sanssl13.bayer.com
crop.bayer.com.au
fakturace.bayer.cz
hcp.nubeqa-us.com
hcp.nubeqa-us.com
bayer.cz
www.canwelivebetter.bayer.de
bayer.cz
sanssl11.bayer.com
sanssl9.bayer.com
sanssl10.bayer.com
fakturace.bayer.cz
crop.bayer.com.au
sanssl2.bayer.com
www.canwelivebetter.bayer.de
crop.bayer.com.au
sanssl10.bayer.com
xarelto.com
bayer.cz
hcp.nubeqa-us.com
crop.bayer.com.au
www.bayer.cz
www.radiologie.bayer.de
www.canwelivebetter.bayer.de
fakturace.bayer.cz
fakturace.bayer.cz
cropscience.bayer.cz
www.cropscience.bayer.com
sanssl9.bayer.com
sanssl13.bayer.com
sanssl2.bayer.com
sanssl10.bayer.com
www.agrar.bayer.at
www.agrar.bayer.at
bayexpert.bayer.cz
www.canwelivebetter.bayer.de
www.agrar.bayer.at
www.seresto.com.au
www.radiologie.bayer.de
fakturace.bayer.cz
www.canwelivebetter.bayer.de
xarelto.com
www.radiologie.bayer.de
www.canwelivebetter.bayer.de
bayprofit.bayer.cz
sanssl13.bayer.com
sanssl10.bayer.com
www.bayer.cz
sanssl10.bayer.com
crop.bayer.com.au
www.agrar.bayer.at

Certificate

The complete raw certificate details for www.bayer.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/nGrlVDhGjzKrfN6Xfx
moqvw2ONkqhAZPZB6Pxqci3tXdgsYtWv6aOHQgGgSwVRXBq3jRemyFk8RicsauJ1
MKF/xu7sUwv9aZUFpqXv/uxeKPLAw0Ntz8l64POb0oRXDQhiOpFLtSEcIE8qi57x
5rh3+dcAmfIy9fSqVHgIRbLgAHiylwZ6eBCKW2dWSWxGXa3C25qFcmjbinmr/TeT
aGbOyjf/riqYPvR74tz9kcXdR1BQy57p/fZFi4kq6dHjyvcArvXDXxENp0qTKzLK
ev67+paPNNxRMeWAqdJzO9KCeCeAu9DOH3CePodn9KVDJm3NilOfBGpbZ5bZ7nOZ
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254965839221710974202491326142708260495
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51368'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bayer.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27264404752013156226718212959286183083191776404667622369498321077205702826685147382926499539814969092744484776780065117237710020641636890949609884963941196688756596004624867750957243097010429947383546479636597722658486119545080909490913879840556553132078519339698439345671036674554885571300809129220109548784088919920264218740371226768024801457126509207570927048452859177553844136252173763198355780068037488225010808421264884069862734645047220007206860951993780595904248362520825156998218395612237324211486959241916362921786125267148101695455518318475719278340376804010526865443001765074653260888182461455035358484843
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1b24892ad8d12e1cbff28a2217c2fbe0611ee16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016d02202e46000004030046304402200e7dc257558ed89c0228907bae85d917ff698614073f7ecb181512d6a5ce4f3a02202ef4e526515640f9b9628e9f267414bed391dcda22248989fde4bd3b7426fc050075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016d02202e5e0000040300463044022039773d703f13adeed0f1fa16f46fa516fa3e7526e36afa1b3bdd31e54fa50f22022064eb551d9c5bb86bd5c20eaf5236372dc52027b371f8d505283653fa053b7638
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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