environmentalscience.bayer.us

Issued by R3

About this certificate

This digital certificate with serial number 04:46:ff:3d:60:c0:bb:85:f9:3f:7f:34:89:a8:4c:d1:c2:d0 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=environmentalscience.bayer.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:46:ff:3d:60:c0:bb:85:f9:3f:7f:34:89:a8:4c:d1:c2:d0
Serial Number (int): 372608181242921368015317910695113227616976
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 05:02:20:3a:0f:de:a2:65:34:03:8f:cd:7d:9a:ba:f1:f1:b3:98:aa
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 22:62:4e:cb:c5:9d:f0:d8:76:b6:6b:64:55:d4:e1:c1:2b:ff:e5:24
Fingerprint (sha256): 08:e6:5e:1a:d4:a4:7e:1d:a1:ad:cb:e0:cd:42:ad:b9:44:6f:28:8b:26:66:ec:70:17:d2:46:84:16:e7:4a:66

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate environmentalscience.bayer.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for environmentalscience.bayer.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

environmentalscience.bayer.us

Other certificates including the domain name bayer.us

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
*.cropscience.bayer.us
pft.bayercropscience.us
legaplus.bayer.de
sanssl3.bayer.com
bulktanks.cropscience.bayer.us
cropscience.bayer.gr
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
es.bayer.be
www.cteph.com
www.bayer.us
sanssl24.bayer.com
www.kogenate.ca
analytics.bbo.bayer.us
idnet.bayer.com
one.bayer.com
sanssl13.bayer.com
sanssl13.bayer.com
one.bayer.com
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
www.ridbedbugs.com
environmentalscience.bayer.us
www.antikoncepce.cz
fund.bayer.us
environmentalscience.bayer.com.au
stage.maverick.bayer.us
go.environmentalscience.bayer.us
www.cropscience.bayer.com
www.kogenate.ca
fakturace.bayer.cz
www.cteph.com
www.antikoncepce.cz
pft.bayercropscience.us
www.antikoncepce.cz
msms.bayer.us
www.antikoncepce.cz
one.bayer.com
www.antikoncepce.cz
analytics.bbo.bayer.us
bayer.us
hawaii.bayer.us
career.bayer.com
secure.bayer.com
pft.bayercropscience.us
pages.environmentalscience.bayer.us
www.media.bayer.com
one.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
fakturace.bayer.cz
www.cteph.com
career.bayer.com
msms.bayer.us
www.cteph.com
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.lampit.com
sanssl10.bayer.com
legaplus.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
sanssl3.bayer.com
www.cteph.com
sanssl13.bayer.com
www.cropscience.bayer.com
www.antikoncepce.cz
beehealth.bayercropscience.us
pft.bayercropscience.us
www.career.bayer.pt
stage.maverick.bayer.us
career.bayer.us
www.cteph.com
pft.bayercropscience.us
www.kogenate.ca
www.media.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
stage.storelocator.services.bayer.us
myradiologysolutions.bayer.com
www.cropscience.bayer.com
www.kogenate.ca
www.media.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
www.weather.services.bayer.us
www.cropscience.bayer.com
www.elevit.com.cn
www.media.bayer.com

Certificate

The complete raw certificate details for environmentalscience.bayer.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAyMLjytlTDME8iHCRQ0ea
OWuWZGx41CZ0wZC52seUdcmFI5tr511/TM3ZKYE8ehB6lpP+zvG6Z/0vC+299i6U
QuD0Dkxfw+G6p84A02UY58lTyez1AG1VniBpuv106qU1H9HxZi/DrncDxp185DDg
w+aSesQxzMAIZIOuYrZqTmZgGD10xBl1ZRwp+6FEfGM1wjY5uXekVTcTKfTWUWTB
t0CDSG2FSkZfJ1iR4hNg+kCdMM6COESD7FoDhcHbXcOnqYrdoOm1aTUFlQYnxPD1
/Spdg8iMLNvF/4ew/DKYYRLfnKqLVxsSRKUyEHQ1QZUFPk1eKSRub21xihfXHeHV
dBR8C7QhCGzLzxKaG/SkTnZaG51VE+DMGI7bScfUEtkMt/W5DzxN1/iIT7lZBFR9
E12WnI/sXFgGDksijrH3Pg6MZOdTbNuZv15XlJikIY1y8vZN0U/DMmmzY3ZXmtUx
wSdCi1dewdg6jhQG16iZq4UDzdMqe8TGOM7UqIrL9svBf9c9SN/IK4U57pUTzsrm
Oao/TuWGVh7Mv6RJKimqAXhBPk3cbAni9SniqO0CQgUdonFolMIlZ+KVX4tbSRCt
uHnfkFr8HmnTIlcMirSxmRwZ6XKWGskB5NlRRtl2ULP95RD+FsOPKbVLvzjE1BLa
9cUjM2P5cyGW6zbCfOxC1V0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 372608181242921368015317910695113227616976
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-17 12:52:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-16 12:52:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'environmentalscience.bayer.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 819034599047450038588345217916298074541615614086094861611491552870014984203326985454434371220316995379399298852879931879327772374080438204097645732444597551730771771008427567600550699158085062509657303414593129942947036485350542099827501699509593880004919717234603512051277005495554873996041509747919461838776844927120717723855305010774895244553547343375250220413811007663915064087093372368300966226132214914953234564010334516086661160924421702746373600674794848467405362148044579021096889176440982061576654870884147552471159097001038269726020392313590881803681448337812081534854097751527307600426796690825432703805419703061791889302598648974834740865310062807352681806871719441066451419541394705289165296007244326047200458164025111883768094076228346161278662734785416186188460870740311023002457849821519426104072694074390022728542481615717327718829645700773526107965622524264933352525902734688592029725633977116297429737208641282823008659358748363203960422846980771821659216387618013902029857026467776748860663784257059060213820541116276226933510256724586777949438584745713337800039808853168799449072186774219802590597765333453478110572737438487351657619053250636801614365839424915736515807666454060445012607167366167659419288130909
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0502203a0fdea26534038fcd7d9abaf1f1b398aa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'environmentalscience.bayer.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aa36a12fa000004030047304502205528e1c9691afff3c1ee9aaf083eac2999f5b980d7296c2ace7fbf4cc9cad3d202210098b80dc22830a3bfe6a3c28d5489bd07f259e101a48cfa4c866c7f8285ffbc0e007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018aa36a12f40000040300473045022100c157a66d43bec8b1a7981254d61f3bdc4072c962db29e137f72c7f32536b111302201b610a0cef2b15c00adc25d8617b5723cacdf47215e28ff2269774ab22c2528f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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