www.solutions.covestro.com

- Covestro Deutschland AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 38:7c:2d:6b:5d:a5:93:c7:b2:4a:de:5f:73:f2:dc:d0 was issued on by Corporation Service Company.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Covestro Deutschland AG

Organization: Covestro Deutschland AG
Organization unit: Covestro AG
Organization unit: Unified Communications
Address: Kaiser-Wilhelm-Allee 60
Postal code: 51373
State / Province: North Rhine-Westphalia
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 38:7c:2d:6b:5d:a5:93:c7:b2:4a:de:5f:73:f2:dc:d0
Serial Number (int): 75081533789241437405248060155887803600
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: bc:cd:96:95:70:30:6e:46:b6:a9:ea:11:57:7a:ec:dc:09:28:5f:0f
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): b7:9b:58:9d:df:ee:6f:70:2f:14:2b:a7:07:c3:af:35:47:47:1d:22
Fingerprint (sha256): 08:be:27:dd:87:67:3d:64:da:97:5a:a6:be:0e:31:6c:ae:4b:39:82:b7:b5:6f:d0:9f:85:29:a1:72:b5:7e:b2

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.solutions.covestro.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.solutions.covestro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.solutions.covestro.com
adhesives.covestro.com
coatings.covestro.com
elastomers.covestro.com
films.covestro.com
plastics.covestro.com
polyurethanes.covestro.com
solutions.covestro.com
tpu.covestro.com
www.adhesives.covestro.com
www.coatings.covestro.com
www.elastomers.covestro.com
www.films.covestro.com
www.plastics.covestro.com
www.polyurethanes.covestro.com
www.tpu.covestro.com

Other certificates including the domain name covestro.com

(limited to 100 certificates)
order.covestro.com
qa.service.media-assistant.covestro.com
customerday.covestro.com
app-main.easy-entry-app-qa.covestro.com
tec-p4t-p1p.covestro.com
initiativeplanner.covestro.com
pureinsights.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
commoditycatalog.covestro.com
*.preview.covestro.com
www.solutions.covestro.com
myaccess-pgh.covestro.com
catalogue.api-qa.covestro.com
cups.covestro.com
www.i4pto.covestro.com
customerday.covestro.com
mtr-qa.covestro.com
order.covestro.com
adamintellecat.covestro.com
customerday.covestro.com
new-select.covestro.com
order.covestro.com
www.pureinsights.covestro.com
extsipap.covestro.com
extsipap.covestro.com
mediahub.covestro.com
www.covestro.com
www.covestro.com
corporateshop.covestro.com
order.covestro.com
*.preview.covestro.com
vmi.covestro.com
www.mediathek.covestro.com
app-main.easy-entry-app-qa.covestro.com
etrip-cn.covestro.com
corporateshop.covestro.com
www.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
api.select.covestro.com
select.covestro.com
rimgate.covestro.com
dev.identitynet.covestro.com
qa.identitynet.covestro.com
www.pac.covestro.com
adamintellecat.covestro.com
www.covestro.com
trainingportal.covestro.com
api-development.lisa-qa.covestro.com
sentry.select.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
warehouse.covestro.com
www.covestro.com
em.covestro.com
proveedores.covestro.com
easy-entry-app.covestro.com
catalogue.api-qa.covestro.com
commoditycatalog.covestro.com
proveedores.covestro.com
www.sheeteurope.covestro.com
extsipde.covestro.com
www.prodin.covestro.com
pureinsights.covestro.com
trophy.covestro.com
catalogue-cognito.api-qa.covestro.com
cups.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
investor.covestro.com
apac-qa.order.covestro.com
update-manager.select.covestro.com
extsipap.covestro.com
www.covestro.com
mediahub.covestro.com
www.solutions.covestro.com
cp.covestro.com
investor.covestro.com
service.media-assistant.covestro.com
www.covestro.com
salesaid.covestro.com
logging.select.covestro.com
customerday.covestro.com
pac.covestro.com
*.p6.ta-qa.covestro.com
qa.service.media-assistant.covestro.com
docs.api.preview.select.covestro.com
smtpmx01.covestro.com
qa.media-assistant.covestro.com
investor.covestro.com
catalogue.api-qa.covestro.com
www.covestro.com
test-catalogue.api-qa.covestro.com
auth.optical-material-data.dev-imagio.covestro.com
proveedores.covestro.com
customerday.covestro.com
extsipde.covestro.com
extsipde.covestro.com
monitoring.select.covestro.com
iot-platform-qa.covestro.com

Certificate

The complete raw certificate details for www.solutions.covestro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAocTLgCg4t1Z/ga3+JCwT
HuiZhiVEG1+yRj7JtgfLGlOf+8waxB1TjWmZZ7iPaGct26jMCtBuNVcuaruZ4Rek
K3XG9i22VYjnElAXRWKJ3FWIUtt/UanqOcyu6roek72Nyd85EB9MJ5Az/YSnna7m
bSmnt3JzEvhh01sC9+qBcUeur0FIy55rHRli6JI1FhOyadvoQpZym0RcpmgsYKS4
6BwBueQaAZ7EXgb1y8vAl5cENRDgbi6ws/LsY+quu4I3WXFgjMZiLr/mEkGct3F5
4TO2N0+ylMTF/KL9hQQC062+dRQ8IGYfGsN5gzO08gpee+HTW2u5N8EqxTpbvoYU
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 75081533789241437405248060155887803600
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51373'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 60'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covestro Deutschland AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Covestro AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.solutions.covestro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20421410293543526129855143479760592866273359275058303738287598423827081102850318938966673668701020492230996620326399608007812056338999673600241169177975411349110706840863459733562685124409311148885788670636693640675263956372734374802813100146028865492793136849016408638479417513431103762316720923049214079979711721546151323492443976275630633673197460384658635733310253054909275176885086435487616358930112419496696955810090109208485143026979859012955067428688948650828257398548421215504606055145332425860675974855759985723510443845905031597643752964793031139487096297133235884080419848801119951525022057907766816019701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bccd969570306e46b6a9ea11577aecdc09285f0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (406 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.solutions.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adhesives.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coatings.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elastomers.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'films.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'plastics.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'polyurethanes.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tpu.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adhesives.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coatings.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elastomers.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.films.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.plastics.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.polyurethanes.covestro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tpu.covestro.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b89b0a38f0000040300463044022002066f96fedf45857d2a28c237b11d0576161c8d3f5351590dd749a8cdb9a10702207203385699647bb7a9d9d2fa0f68970cb68f6b8c650303c8d7b124fd3182c5ec0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016b89b0a3900000040300473045022046a6059a47af957c606a9edba0e6dd79ba4f6ef85545f99bf81ce12a4a4467df022100e02604e2559da2f781e574e7f4311336710c49c499785b464cca35f63a141ad30076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016b89b0a38e0000040300473045022071559851021709ce206fc4ff1caecd58fcc42d39c6f55c9f535ec2bb9f341275022100fb0d0457f99aaa1fee230968b6585025f90e6cfaf893228692739f2b2ba48d3f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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