magazine.bayer.com

Issued by R3

About this certificate

This digital certificate with serial number 03:54:d1:ce:1c:99:47:a7:12:7a:c1:47:af:cb:f7:0a:3e:03 was issued on by Let's Encrypt.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=magazine.bayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:54:d1:ce:1c:99:47:a7:12:7a:c1:47:af:cb:f7:0a:3e:03
Serial Number (int): 290199455460963029643228971917305226870275
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 27:14:c1:52:03:d5:20:ec:5b:ec:1e:12:91:ea:95:06:40:d7:8f:28
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): c7:c7:45:f9:3d:13:39:f4:6c:f9:b3:7e:e8:ec:33:24:90:e0:1e:8e
Fingerprint (sha256): 04:77:02:02:a5:3a:36:6e:7b:a6:52:72:69:8c:8e:fa:aa:01:ad:4b:1b:87:97:bd:6d:53:b6:d7:d1:38:71:db

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate magazine.bayer.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for magazine.bayer.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

magazine.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
www.cteph.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
www.aspirin.hu
syreon.org
shareholderservice.bayer.com
staging.ch.api.int.bayer.com
partneryourantibodies.bayer.com
www.complianceposter.bayer.com
registration.diabetes.bayer.com
email.es.bayer.com
idnet.bayer.com
akamaisecure7.qualtrics.com
efield.bayer.com
entitlements.p3002010-dev-4cca-rdl-calantic.on-gcloud.bayer.com

Certificate

The complete raw certificate details for magazine.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAupyfcbNcNdp+ocXL1F24
wnuQqhsagRyt2qCxM8KMwHDgDmyd03T4F0cZiBK6Ct7BdJ4PSCE50UjpYdqGFkNu
lmIXOxFvoPKHiGa46RAK0e8t07kG9o5XF5Ap2H8g0TXfV0eysSsoeYlbU80biUYP
Dwk13BbE0QzDP4AZt4TfvJblM6y7H2lx8XwiA7MIBBk6g4wPI030+mukKSlEyApQ
P7LWWPVrlhNm+XVxjaNUR41bVtVJPPF4OzUD02fynhVldgpvwu4NkuPonTeDJfpX
ZyBkNbr3rBBbpMyvkfEtiS8KN9uEnc9fpHjNdc5JQpBZsqI5IH5w4iQQSYgyEBck
ViKihL8YfNPGm98Z9nD8Mm+QMRMpKfqryPwBAJ5sA7G3iXwdOz721bOWp+Q2km4g
rgIUcaV7FnINYi3LAlEmnsbIOgRL+GGNQEsBNYk7uV7jpIeob4VBZl/1xp2ikYVc
j3C5K4v4uiI3EqMi0LzW8t0CVna7GcRsdwlgghay4rnzwSp2oqWKzh+uc3+lC/i+
++/6ULlWjyVykx2EAJSMuOtUsfJcFT3GhuGOqZXbnI564rMcIqKB19llZyjNUL36
UZmozKnn8JfYwABAUH8bwWBRdqI0cMQ7O1xjWlr2PvgB0Npi+fci5v2B9rXK/l88
/FpABL865WHLeev/NbPS4TECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 290199455460963029643228971917305226870275
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 03:57:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-02 03:57:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'magazine.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 761309755221886828819115221619134444900689011992209956336938540141694283668972395912862098898640524500995707144268571654336040894217609222809480650089064442623419214831822334514238513223395881076831400521658489698064179607606748924786489089941400207103695894095782763768156376175831966777505381885053260504444106937514858326147028625620179306645510706924073633724372297335909687389799613783967268247214972288461846852157236060138946704601888053398426219234256405482115748870710909530197448171750892706810160792619734251365905440225537991096080988571793560813355375230685679458333420853169951521739328557277232115706372623163534270755333320617610673981405162405460099051810375649427877930057308600107338862981243426757453579845098178643980619383326833482593062335060036577756272950291387586835506632752589812968664431982487761981289989844622377190148921679058730619806595480057023426336132958791014942230334316490268267566385641571487431942790005645081727691508935601734557162005764776268331778482643836668098538120603117769505810801526400787043777120274519330831377104028297983147717554354201100502966879050895598685494409271380797272263615005180648605695819362110806480579057925653318500955858658768388599992428187853813309919912241
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2714c15203d520ec5bec1e1291ea950640d78f28
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018ea25198f300000403004730450221008d4a58708aff945a5216b3db72d0db1698a8c18d92261ed31fcaafd0ffc8977802201b46a0914a93be4793c4fa44a72fc48e2e2f316f27f39755080f336243d80cd5007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ea251990000000403004630440220408d9ee85c828bd4b4fac3b7b8e7656722189cf4b649781420ada096e8557c3302205cb1665c8bbbcb94016c154f53e5f9d5c45cc95aeb7b9554a4e88f3e1a986204
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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