radiology.bayer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:95:1a:a3:73:7d:9d:b0:49:f7:e1:57:b8:ef:5d:ff:15:73 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=radiology.bayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:95:1a:a3:73:7d:9d:b0:49:f7:e1:57:b8:ef:5d:ff:15:73
Serial Number (int): 312074339081208346986530145459061913490803
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: be:9d:96:c2:d5:6d:70:71:33:eb:92:b9:d2:bd:24:90:70:ba:43:ae
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): b6:41:fa:ad:65:63:91:8f:90:7d:b2:ed:b8:ad:a5:cd:9e:e3:25:b9
Fingerprint (sha256): 03:31:40:19:c7:19:7f:0d:cf:3c:b3:dc:17:66:66:09:4e:84:12:a7:2b:0c:f2:da:ba:ee:92:da:7b:a7:45:17

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate radiology.bayer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for radiology.bayer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

radiology.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
*.926611122902.cloud.bayer.com
*.genetic-data.509537612977.cloud.bayer.com

Certificate

The complete raw certificate details for radiology.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312074339081208346986530145459061913490803
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-25 05:35:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-24 05:34:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radiology.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 813506437998154712702147925050277252924826403842482593808092411455898795845187184676907595409866343304452238210703130942831954841049633545859035000727591417794448662410258597641615015611697658400802058139922009579243967994401001325780499145059501814604808742970655483923697107154563262145912078496563149272193584958610601513037173440135903537348788131562542482411006246419331862926663407775939078564404843024720019706214044513137955482447136904098910102103946939736018227181339937799204693707416616797871758142717675034404802012653980327684994234042785414380080701851986595903605105176551904789541547779033569656129901730871961565688269515512055266151629712343116222794421572050036512323216734427602476779540462050947492930499958626901182836947263999763498075773576916054233130565685322025614773704223365783197711695984250713014660362551573051414578599831647474876442689368800723091666104191995867855776471390522445518483123632345240393415139586525941690279362317779706132929624495106194146353672050126755620460798905526331725176926259273697110244459243709928906946265966565687055730299235547497156834461563263554127638607019110885130481734621880567796577543535869756113975531534514247110381472231868105425230490438093285279717489173
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be9d96c2d56d707133eb92b9d2bd249070ba43ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radiology.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600dfa55eab68824f1f6cadeeb85f4e3e5aeacda212a46a5e8e3b12c020445c2a7300000183735b332000000403004730450220226c82217e3b4420b8f13464552cf7251e994d53f9beb173d2870ab71741d1b90221008f5ace0c5f2f21da665e9d03b275da08a0451ed10cfc70f1c9a5d5ced64602d40075002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc78400000183735b33190000040300463044022017d48a54ec9c49a0dcfebc68d3dca7c645a084221782304374fef6abb7bf0a6202201da0e9b9c96d299a838e4290f42293a5b4453752cc274419628e07532c79bbd5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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