www.finacea-us.com

- Bayer Schering Pharma -

Issued by Bayer Group External Server CA

About this certificate

This digital certificate with serial number 29:97 was issued on by Bayer Group.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [KeyEncipherment DigitalSignature ContentCommitment] (00000111) inconsistent with ExtKeyUsage serverAuth The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer Schering Pharma

Organization: Bayer Schering Pharma
Organization unit: BSP-BBS

Bayer Group

Organization: Bayer Group
Organization unit: Bayer Business Services

This certificate has expire since

Certificate Details

Serial Number (hex): 29:97
Serial Number (int): 10647
Serial Number lenght: 14 bits, 2 octets

SubjectKeyId: ee:9b:8c:a9:f4:5d:72:1a:ca:3b:de:57:67:5c:bb:87:b0:45:af:8f
AuthorityKeyId: eb:5c:ee:38:b6:e3:8a:6b:aa:cb:d6:85:94:84:58:f9:89:ed:c9:f2

Fingerprint (sha1): 0d:aa:c4:1b:02:87:1d:2f:6c:26:f7:f8:61:09:b7:77:b0:28:8a:d3
Fingerprint (sha256): 16:73:dc:34:84:fe:15:10:6e:5d:fd:68:1d:ba:24:5a:9a:f1:4e:91:17:46:74:53:56:97:15:85:33:0c:a5:f4

Issuing Certificate URL: http://pki.bayer.info/grouppki/externalserverca.cer

Revocation information

CRL Distribution Point: http://pki.bayer.info/grouppki/externalserverca.crl

Check the revocation status for certificate www.finacea-us.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.finacea-us.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.finacea-us.com
login.finacea-us.com
finacea-us.com
login.myfinacea.com
www.myfinacea.com
myfinacea.com

Other certificates including the domain name finacea-us.com

(limited to 100 certificates)
www.finacea-us.com

Certificate

The complete raw certificate details for www.finacea-us.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQC41lAJbuGySCJK3Krw0mQIclkt
ppAKBJje0cl4dItlis1kUhMg3CqJ2jrbQ2vONw0BM+ei2AVg6HQvQKrSIlEfcSe5
lgM2rdwktcLtjpIQnxgQKPNs4P3VYPaXfLPunJj2g2Ez2y5te/I7LDxg0Q0nSM8a
ZLWxYjeh5dFauC2KOQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10647
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Group External Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-30 13:22:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-30 13:22:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Schering Pharma'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BSP-BBS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.finacea-us.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 129797066945306935761933738437646469394397381762047084116020900485090847627081011352605543871505364971024270785769903512190583291763871688846230387061352063248085150237096511376601996709538776621351317662537987271378701328847942304604335705705931946427403901174219657213732992573221532460639075675707808778809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.37980.100.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki.bayer.info/grouppki/cps.pdf'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							0640
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finacea-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.finacea-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finacea-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.myfinacea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myfinacea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfinacea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.bayer.info/grouppki/externalserverca.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName eb5cee38b6e38a6baacbd685948458f989edc9f2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.bayer.info/grouppki/externalserverca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee9b8ca9f45d721aca3bde57675cbb87b045af8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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