qa-downloadcenter.bayer.nl

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:31:fd:04:d8:29:dc:b9:2a:f7:b2:c3:a2:21:11:ce was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=qa-downloadcenter.bayer.nl

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:31:fd:04:d8:29:dc:b9:2a:f7:b2:c3:a2:21:11:ce
Serial Number (int): 13551834337359109628895433372765065678
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 37:76:bc:84:3a:1b:e1:63:70:ec:8d:9b:63:a1:ba:a4:0e:69:67:49
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 93:36:42:13:c9:e7:d3:25:b0:19:7c:40:bf:16:b8:52:6b:fd:d4:e7
Fingerprint (sha256): 29:d4:ba:25:54:f2:66:31:ef:ca:fd:fb:47:6e:14:ae:9c:66:20:67:6e:23:03:80:54:1f:ad:55:36:2d:3a:77

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate qa-downloadcenter.bayer.nl

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qa-downloadcenter.bayer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qa-downloadcenter.bayer.nl
www.qa-downloadcenter.bayer.com
www.qa-downloadcenter.bayer.nl
qa-downloadcenter.bayer.com

Other certificates including the domain name bayer.nl

(limited to 100 certificates)
investor.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.sms.bayer.nl
bayer.nl
es.bayer.be
www.seresto.se
one.bayer.com
pharma.bayer.nl
agro.bayer.nl
qr.bayer.nl
one.bayer.com
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
bayer.nl
environmentalscience.bayer.com.au
www.cropscience.bayer.com
www.bayerhealthcarepharmaceuticals.nl
bayer.nl
www.seresto.com.au
one.bayer.com
bayer.nl
career.bayer.com
www.seresto.com.au
www.bayer.nl
one.bayer.com
www.cropscience.bayer.com
www.seresto.se
one.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
xarelto.com
qr.bayer.be
crop.bayer.com.au
career.bayer.com
www.canwelivebetter.bayer.de
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.frauenaerzte.de
sanssl10.bayer.com
drone.bayer.nl
legaplus.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
investor.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
www.radiologie.bayer.de
bestel.kogenate.nl
www.frauenaerzte.de
myradiologysolutions.bayer.com
events.bayer.nl
www.cropscience.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
downloadcenter.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
agro.bayer.nl
www.cropscience.bayer.com
investor.bayer.com
sanssl1.bayer.com
career.bayer.com
sanssl10.bayer.com
www.seresto.se
qa-downloadcenter.bayer.nl
legaplus.bayer.de
drone.bayer.nl
sanssl19.bayer.com
es.bayer.be
www.canwelivebetter.bayer.de
sanssl3.bayer.com
es.bayer.be
sanssl10.bayer.com
bestel.bayer.nl
sanssl33.bayer.com
career.bayer.com
xarelto.com
one.bayer.com
www.canwelivebetter.bayer.de
secure.bayer.com
service.bayer.nl
secure.bayer.com
service.bayer.nl
www.cropscience.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
one.bayer.com
one.bayer.com
healthcare.bayer.nl
www.canwelivebetter.bayer.de
legaplus.bayer.de
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
secure.bayer.com
legaplus.bayer.de
career.bayer.com

Certificate

The complete raw certificate details for qa-downloadcenter.bayer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmjRmfHNmKfMZV4IMO9Nk
pSzdcfYWT1yDzKNQtMHpJWEDXYA/SatYULVGElHWdgvZny0OvElz/MTG2CpUk39b
Fl120aEhWjv+5cA0hHVy5n9lOlGpG0yNGWaxnoIOaj2Jnu2Xq7f4n8b7rOLfRfiW
Jt7Y8PMuHG/oJieo3hVcQ8xOw4TIrUS9z5zcmF5PYnwf2hK/2/BW9hPyAKJq5UyB
Gmgnjn0CWHVouwFJjX5WgCoqLski8F5iCINBsvGeiVuFmw6253/aJc83G2E6Jfdp
HyP+xAde3pwlMARGMfjrACI7p9+1g5EXbUPkdE0sMTDRNbZGihSSaotbdjxAoaF1
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13551834337359109628895433372765065678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qa-downloadcenter.bayer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19466538533739403877744952636950996299502774506769766288487649972829958526767643290747994649367104256746633133419774412100384980415302066452443612974968818507775630011935965013149992578133779828644500771681862313165463117595695134291867122828133094335649275020491571991855936884236951572049420608914000895964670098882204272122488710114554084409627718923374853889767297275123326076047004778866639372478590272032648229605413318433907387529288026172438426593991004718331972917304145601925428342040603383710291921386652840831242048745622167103665984905663967480334868653086221552398983589222199566487007275876936696559073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3776bc843a1be16370ec8d9b63a1baa40e696749
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-downloadcenter.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-downloadcenter.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qa-downloadcenter.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-downloadcenter.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000bc9e6d79b68c987ddb07871b169b06997a7a570fdf02c7b36c93b847188aedf09a9132070158ded71a174399f83ed82ce114ed842ddba7fb003cf1781a1f3c2ed44a47cd8b118c7414b3b4412b0bba92adbc40362347cd9b338eded0e87323d0be8014474accad4fb208bc87182d1cb76cfd7ca1cef0360cd7fb31b990ac8304aa27bbb3e13532b43bd0d8c3fe4b8f4c3153cd72ca21d3ab859e33e9fc7897997e5093ee577683e3c1308e61e933c942ff26730a695bd5d0297a675ce8165a50412345f6aad8a08e1f48c04ce4859953e5e4a28a793d53fd46095a1684b76dcfac12548c24a79808d72443b8e31c0a1beabe5dd1a5955687f95bb35eb0e7c0e