www.career.bayer.be

Issued by R3

About this certificate

This digital certificate with serial number 04:06:a5:04:aa:8b:c6:3e:c9:b3:8b:5d:48:06:50:f1:9f:ae was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.career.bayer.be

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:06:a5:04:aa:8b:c6:3e:c9:b3:8b:5d:48:06:50:f1:9f:ae
Serial Number (int): 350710184776142263773735317876733266468782
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: c0:c1:48:ee:44:4e:11:c9:b9:c1:66:4a:71:49:fe:99:09:9b:84:24
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 18:93:3a:b7:21:5a:34:22:1d:0c:ee:2b:6a:37:57:42:c5:bd:64:90
Fingerprint (sha256): 09:68:e6:79:2a:c4:e0:ea:ab:e5:2e:6d:bc:1b:be:32:52:97:1a:6f:b3:59:64:0e:d7:65:5f:54:35:f1:fa:9a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate www.career.bayer.be

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.career.bayer.be

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.career.bayer.be

Other certificates including the domain name bayer.be

(limited to 100 certificates)
investor.bayer.com
elibrary-cardio.pharma.bayer.be
legaplus.bayer.de
sanssl3.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
es.bayer.be
www.bayer.be
www.seresto.se
career.bayer.be
career.bayer.com
hcp.nubeqa-us.com
qr.bayer.nl
www.bayer.be
conecta.rocheplus.es
www.cropscience.bayer.com
career.bayer.com
www.seresto.com.au
www.canwelivebetter.bayer.de
www.career.bayer.be
www.antikoncepce.cz
hcp.nubeqa-us.com
sanssl9.bayer.com
environmentalscience.bayer.com.au
www.cropscience.bayer.com
fakturace.bayer.cz
www.antikoncepce.cz
www.ecards.bayer.be
pamde016d.kadrige.com
www.radiology.bayer.be
www.seresto.com.au
www.seresto.com.au
www.antikoncepce.cz
www.bayer.be
career.bayer.com
secure.bayer.com
www.seresto.com.au
www.bayer.be
www.pharma.bayer.be
content.bayer-cardio-lib.medengine2.com
www.seresto.com.au
www.cropscience.bayer.com
contact.bayer.be
www.seresto.se
sanssl3.bayer.com
www.cropscience.bayer.com
www.environmentalscience.bayer.be
qr.bayer.be
pamde016d.kadrige.com
fakturace.bayer.cz
crop.bayer.com.au
bayer.be
www.diabetes.bayer.be
hcp.nubeqa-us.com
elibrary-diab.pharma.bayer.be
career.bayer.com
es.bayer.be
www.canwelivebetter.bayer.de
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
career.bayer.com
www.bayer.be
www.pharma.bayer.be
www.canwelivebetter.bayer.de
www.frauenaerzte.de
sanssl10.bayer.com
legaplus.bayer.de
www.canwelivebetter.bayer.de
investor.bayer.com
www.events.bayer.be
sanssl3.bayer.com
www.bayer.be
www.cropscience.bayer.com
www.antikoncepce.cz
www.career.bayer.pt
pamde016d.kadrige.com
www.agrar.bayer.at
www.radiologie.bayer.de
career.bayer.be
www.radiology.bayer.be
www.es.bayer.be
www.antikoncepce.cz
career.bayer.be
www.frauenaerzte.de
myradiologysolutions.bayer.com
dot.bayer.be
sanssl4.bayer.com
www.cropscience.bayer.com
www.environmentalscience.bayer.com
www.cropscience.bayer.com
sanssl4.bayer.com
www.elevit.com.cn
sanssl4.bayer.com
www.canwelivebetter.bayer.de
fakturace.bayer.cz
pamde016d.kadrige.com
www.cropscience.bayer.com
fakturace.bayer.cz
investor.bayer.com

Certificate

The complete raw certificate details for www.career.bayer.be in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 350710184776142263773735317876733266468782
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-13 19:42:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 19:42:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.career.bayer.be'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 941366171414949883459661264865341581519963996017176705166571572743657540210957682557667761160968810085340248472605434665659298987612207403670695466205411189744666644489634026764913513822618918929868891551759950998709944281678520862282199584645702646178492834541933332454439988505308197220982513422794509236883868836294876231687672792104285894548142575992340341968128361231283046349086266579411986500095311571218359871182126236176866647226090361207629341505680805265985948179607415451569818010242710835846080869787017727211764297548150300467374456323908493098666267051553948767102735793517993488312158074287446562140756418105961483177146574508469235614554644834894751932285958029585717221377235927526823824519020850538487472331765060031711822132102678040796574966634205048410975015702878942308798164305784161182883485014133019687265150105297118658888784213467902385609049737338986334045416871852840403528535577158099967368083666590526423815192153890877938867112211526015549907784514288021120292573778121761451356208475671597255504249873375632804974550697555851340303965303019364091536926633663244705105767583104372097025668684126066763071097038320765660557940935625152194223847258837004094842644506518663273575509226579971905513509809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0c148ee444e11c9b9c1664a7149fe99099b8424
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018950fd51ba000004030047304502201b88d24f26bd796d7449da33f23d2a6170de9d611de977ff663cd52066939935022100ba83fe66ddaed25fdae0d5bf248e502dcc575e4d06ac54f94eef73ae60ce37b5007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018950fd52090000040300483046022100ab98c7c9c4fef945b4f61b775652338d955f87d1870eadbe28727ccf7cbf253c022100db65ec6a58609aef32194fd453e82248b6e666cd5cc8502c4af2202ba74f00a4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a99869d7328f22d0bcfd0c5cf9183b69363f9daf9be7ae6b701b3490c10d874d0913fb3a5f03cfe477568cc0b3268ffe146c93d3f69d5f674cfd94f832d55283334bfee767889dd266ccfefdea5a1dc029ff642de303a2aa0ffa6c6142b5a8271c749a73e3770f28538b908c95611b9c0826b95b044330a2a9bdd2f2491d17a7d5937c877a790397885669bb95597401f04989442c7cace4a666c8704ee3d16d374dfeb362420c9cf742cc5c9d0435e41e50d46fbd6181118a2d0af4ce42f7d7ee1d43748cec362268a03cc03717356c8d61964ab53de0206fec4f8946b37045b53f7eef1c93138a9c064a4a7d76ab426301eb6f1a1e22382e02ef771e5b3e0f