bayercropscience.us

Issued by R3

About this certificate

This digital certificate with serial number 04:f3:89:95:fa:28:f6:fc:89:b2:9c:1b:f4:27:31:22:6f:45 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bayercropscience.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:f3:89:95:fa:28:f6:fc:89:b2:9c:1b:f4:27:31:22:6f:45
Serial Number (int): 431320641850331454397469850942479834181445
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:5d:bf:3d:8a:c1:09:4b:27:2e:e2:d3:1f:7c:90:23:f6:00:6e:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 63:85:21:74:02:f1:18:a0:06:3a:36:56:e1:0f:32:6c:8f:4c:1a:f2
Fingerprint (sha256): 17:67:32:0b:22:0a:43:83:8b:ae:73:85:cb:d9:31:9b:b5:aa:ae:01:b9:b2:e9:d1:99:4d:e7:75:c9:19:0c:65

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayercropscience.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayercropscience.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bayercropscience.us

Other certificates including the domain name bayercropscience.us

(limited to 100 certificates)
pft.bayercropscience.us
bayerfallsolutions.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
institute.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
communications.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
sni.cloudflaressl.com
ssl6388.cloudflare.com
www.cropscience.bayer.com
ssl509823.cloudflaressl.com
www.cropscience.bayer.com
beehealth.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
sanssl8.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl509824.cloudflaressl.com
bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.balanceflexx.us
stage.connect.bayercropscience.us
ssl98712.cloudflaressl.com
ssl313692.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
bayerkillsbees.com
connect.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
bayercropscience.us
pft.bayercropscience.us
ssl509823.cloudflaressl.com
ssl509824.cloudflaressl.com
pft.bayercropscience.us
ssl509824.cloudflaressl.com
connect.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.cropscience.bayer.com
sni111960.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
cropscience.bayer.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl509825.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl313694.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
ssl509823.cloudflaressl.com
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us

Certificate

The complete raw certificate details for bayercropscience.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 431320641850331454397469850942479834181445
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 13:42:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 13:42:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayercropscience.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622502622847062691519145401146921250576758001363502796561295903185633612347232611964923079314569719772231263830322491598576621067207859305531694368468326315992812184378288697088390150068240680598379783607879580245235645199231721459442824234195455309555030625104247458498286910934064046302576683721346090130492363385253200552644887230048977071200341905997523853885625691496219890569466017035892597300829067208763178328320932932367594875911908129461546195571713577598883063442831286903597069524622191634976466046238733160327187689069318001411782795532623586239364559818759421702758458405428933280495817899013492897847734388217352982959026693960596951363041326865390781856266021984518471433345527050967798945288753744115249056342598993208172272132727615894113756735024167521887773395825628838621356524120684172450663394826397038618463195467555271780435848992789219245210127882139478050975510443409413382274537686772686481686096799393248192595134102522681311095271099450443730837604860788228281442486099169794804927874451656896575589693237313245418433372497181073705692469269561945626637769121492346446555954161996521240655945284478113000097645798608730842658238929290037924197955374091795721110002902663122357897569681724642376481144231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d5dbf3d8ac1094b272ee2d31f7c9023f6006ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayercropscience.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018bfca1957a00000403004730450220526749f5e36c5ee085cd2df9e75d48926fff8d31554ed93ee19d965933fd8882022100b9552b2f4dec8f29a9b83daff05378ddf0a53938359694dd9c1a4168302c823b00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bfca197720000040300473045022100c967e236f1bee5771655ff756d5dc665e8261b9d01309d965ec01bcb212c09f0022019aca243229558a194546c82d5d70de30933b7e76752595a12998d3b505506e7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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