bayer.cz

Issued by R3

About this certificate

This digital certificate with serial number 03:bb:ef:b2:73:ab:d8:6c:d3:c6:19:14:3d:f7:c6:60:c2:d7 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bayer.cz

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:bb:ef:b2:73:ab:d8:6c:d3:c6:19:14:3d:f7:c6:60:c2:d7
Serial Number (int): 325288272475421747236529458159892088013527
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: c9:c8:c7:9e:af:67:9b:19:f1:b7:52:9d:ca:1c:ab:bf:a4:e5:99:5a
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): db:6c:ba:0b:98:d9:73:76:f3:45:9d:a8:d2:f8:ef:7e:3b:08:4a:1a
Fingerprint (sha256): 09:08:99:d2:21:4a:2f:fa:e1:55:20:93:91:e7:7f:6e:c5:45:d7:05:21:90:16:22:52:75:b0:9d:58:80:1e:40

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayer.cz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayer.cz

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bayer.cz

Other certificates including the domain name bayer.cz

(limited to 100 certificates)
bayprofit.bayer.cz
sanssl11.bayer.com
www.bayer.cz
new.bayerscheringpharma.cz
bayexpert.bayer.cz
hcp.nubeqa-us.com
sanssl13.bayer.com
sanssl13.bayer.com
sanssl20.bayer.com
www.canwelivebetter.bayer.de
bayer.cz
sanssl11.bayer.com
sanssl9.bayer.com
bayer.cz
fakturace.bayer.cz
bayer.cz
sanssl13.bayer.com
bayer.cz
sanssl13.bayer.com
www.cropscience.bayer.com
xarelto.com
fakturace.bayer.cz
crop.bayer.com.au
expertclub.bayer.cz
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.canwelivebetter.bayer.de
bayer.cz
sanssl13.bayer.com
www.radiologie.bayer.de
www.bayer.cz
www.canwelivebetter.bayer.de
fakturace.bayer.cz
www.cropscience.bayer.com
fakturace.bayer.cz
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
fakturace.bayer.cz
xarelto.com
new.bayerscheringpharma.cz
sanssl9.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.canwelivebetter.bayer.de
www.canwelivebetter.bayer.de
xarelto.com
sanssl13.bayer.com
crop.bayer.com.au
fakturace.bayer.cz
hcp.nubeqa-us.com
hcp.nubeqa-us.com
bayer.cz
www.canwelivebetter.bayer.de
bayer.cz
sanssl11.bayer.com
sanssl9.bayer.com
sanssl10.bayer.com
fakturace.bayer.cz
crop.bayer.com.au
sanssl2.bayer.com
www.canwelivebetter.bayer.de
crop.bayer.com.au
sanssl10.bayer.com
xarelto.com
bayer.cz
hcp.nubeqa-us.com
crop.bayer.com.au
www.bayer.cz
www.radiologie.bayer.de
www.canwelivebetter.bayer.de
fakturace.bayer.cz
fakturace.bayer.cz
cropscience.bayer.cz
www.cropscience.bayer.com
sanssl9.bayer.com
sanssl13.bayer.com
sanssl2.bayer.com
sanssl10.bayer.com
www.agrar.bayer.at
www.agrar.bayer.at
bayexpert.bayer.cz
www.canwelivebetter.bayer.de
www.agrar.bayer.at
www.seresto.com.au
www.radiologie.bayer.de
fakturace.bayer.cz
www.canwelivebetter.bayer.de
xarelto.com
www.radiologie.bayer.de
www.canwelivebetter.bayer.de
bayprofit.bayer.cz
sanssl13.bayer.com
sanssl10.bayer.com
www.bayer.cz
sanssl10.bayer.com
crop.bayer.com.au
www.agrar.bayer.at

Certificate

The complete raw certificate details for bayer.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 325288272475421747236529458159892088013527
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-15 01:12:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-14 01:12:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayer.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 746170071457562744546171289516198848629426127196385611540638690542510191995305317421711310697825776565452494935114671222394890240887516181615663933877816129988343885083799560928333544138863179500719909022688589918751257771346337166037322791513400724395520382922716892910289021722820938936680304580795737902447756481467461332187424956555368194702790911754482837352844161789772189056283719233544496182264722533151981969340278637033366917705311376864971802661136304657425973335894181237516662865505304652158832186848281114686030953439285809470062450452804272095630225190601003415579898662755143201705456922219841552845034392851910736183118230110061017928330149080761045280208703091262947621428755523019371674883281798098542402697536449410869214889710529442648013094923475263655360177366899308750239545975713291857827156806832144786142111093543760591187251464816866697974690122223382356479677318658946579922531058078487095204021376079781556263564497362806381333243858208202825024449139637885434530243116724022694915845692644441642533010835639647108251388058200529111034236442836375228589618978994415977573688447298395605722343795865240498566601703225576118045348735791406659345600323409830763830425130026518489856280997512233379293183327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9c8c79eaf679b19f1b7529dca1cabbfa4e5995a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.cz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018782af3127000004030046304402201ab39f7d1e71e846d8371d32d0c19ee6a488558df7dde8991ce59e566d781371022078aa7da2606e9506ac0e71b30d71c4570d957a5fc798307700895cde0c0291a7007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018782af32f70000040300473045022100b4bc63eda5c4b1c56d1ba07102ac9f66af973c4b5b430f428e9e1d82a435d8b00220277b8965356aa1550770b4e1e395c5c750327c230c57c2c378988383f7c3b9e9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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