stage.connect.bayercropscience.us

- Bayer Corporation -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1c:ab:86 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Bayer Corporation

Organization: Bayer Corporation
Organization unit: IS
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1c:ab:86
Serial Number (int): 1276947334
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 1c:49:72:ed:15:ad:39:f0:15:00:be:ba:15:79:dd:84:b3:48:25:8a
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 21:c4:0c:30:fc:5a:71:01:c7:03:79:01:96:56:d3:ae:6a:29:b9:79
Fingerprint (sha256): 2e:c9:a7:29:7f:af:91:f2:37:da:3c:9d:bd:a2:a5:cd:e1:05:3e:6e:39:ff:61:6c:0d:4d:f6:d5:76:4a:06:a2

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate stage.connect.bayercropscience.us

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.connect.bayercropscience.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name bayercropscience.us

(limited to 100 certificates)
pft.bayercropscience.us
bayerfallsolutions.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
institute.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
communications.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
sni.cloudflaressl.com
ssl6388.cloudflare.com
www.cropscience.bayer.com
ssl509823.cloudflaressl.com
www.cropscience.bayer.com
beehealth.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
sanssl8.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl509824.cloudflaressl.com
bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.balanceflexx.us
stage.connect.bayercropscience.us
ssl98712.cloudflaressl.com
ssl313692.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
bayerkillsbees.com
connect.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
bayercropscience.us
pft.bayercropscience.us
ssl509823.cloudflaressl.com
ssl509824.cloudflaressl.com
pft.bayercropscience.us
ssl509824.cloudflaressl.com
connect.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.cropscience.bayer.com
sni111960.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
cropscience.bayer.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl509825.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl313694.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
ssl509823.cloudflaressl.com
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us

Certificate

The complete raw certificate details for stage.connect.bayercropscience.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPbSNYKzRKGspGAJwne
rWbJN78p4coLQDSV3ZSJfi7GwBb95IUeVNmFqzXQCV1qNASyK8f8WKDaDhugoaMy
yVn2TbNEmBU57u2iZnGKa7jVXeslifYYw5O6fwSEkIqItt7BQ1ilAbjTx/qX+aSZ
drramIvDcVtP/fQgF0ZIRXs9KDLVy5zms/nf6jqf6rj3wZ9zVtmCRCWyXgqSn0LW
tBgl7A236EfDAxym1l7LHdRIRLaBi36ro5bM9UYnk4pT84UzNWYiV2FS+4Y59Jm5
WLL1yH819z/+kCwF+E9uvEkgbSG+tvv8BIceS1nfBUeOr+lEiFBAn94MZ9hFfaol
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276947334
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-04-16 15:42:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-03 16:48:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.connect.bayercropscience.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22914154101886243148054109978106563603663654135952574565761923290131619013584341338521708501609122806899124860569055019221012169249115945699873476423906696788125932507620154572115923542733534623751169466470314672021503278116152098230800421660948463245550666996365179175020826991892791406906941648337484621069845894460972148467170201060075842239956272352335957602606950432899403414805766087949942064107714634355185246832030506346511135251647118269463842840096944703966387145489709134642912061006644842501582549361244923362515215811663647848336946851390204509255753110433483050466820610651665578691317411361618399995251
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c4972ed15ad39f01500beba1579dd84b348258a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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