service.bayer.nl

- Bayer AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number a6:69:2e:cb:f7:5d:b9:8c:60:39:94:4c:f3:5a:da:47 was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer AG

Organization: Bayer AG
Organization unit: Bayer Business Services GmbH
Organization unit: Unified Communications
Address: Kaiser-Wilhelm-Allee 1
Postal code: 51368
State / Province: North Rhine-Westphalia
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): a6:69:2e:cb:f7:5d:b9:8c:60:39:94:4c:f3:5a:da:47
Serial Number (int): 221197987621157053929901337035591572039
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5d:9f:39:bf:ec:13:df:b0:3f:88:5b:d4:6e:a9:90:ae:29:9a:65:f9
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): e4:e6:65:0b:89:49:0d:d0:93:60:b7:6a:91:fb:85:23:42:cf:56:f9
Fingerprint (sha256): 30:6d:64:12:46:d4:52:c6:da:1f:29:de:30:ca:24:1c:d9:e4:8d:0c:07:74:77:7b:31:f0:d0:fe:70:4a:28:73

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate service.bayer.nl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for service.bayer.nl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

service.bayer.nl
service.bayer.be

Other certificates including the domain name bayer.nl

(limited to 100 certificates)
investor.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.sms.bayer.nl
bayer.nl
es.bayer.be
www.seresto.se
one.bayer.com
pharma.bayer.nl
agro.bayer.nl
qr.bayer.nl
one.bayer.com
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
bayer.nl
environmentalscience.bayer.com.au
www.cropscience.bayer.com
www.bayerhealthcarepharmaceuticals.nl
bayer.nl
www.seresto.com.au
one.bayer.com
bayer.nl
career.bayer.com
www.seresto.com.au
www.bayer.nl
one.bayer.com
www.cropscience.bayer.com
www.seresto.se
one.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
xarelto.com
qr.bayer.be
crop.bayer.com.au
career.bayer.com
www.canwelivebetter.bayer.de
sanssl3.bayer.com
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.frauenaerzte.de
sanssl10.bayer.com
drone.bayer.nl
legaplus.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
investor.bayer.com
sanssl3.bayer.com
www.cropscience.bayer.com
www.radiologie.bayer.de
bestel.kogenate.nl
www.frauenaerzte.de
myradiologysolutions.bayer.com
events.bayer.nl
www.cropscience.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
downloadcenter.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
agro.bayer.nl
www.cropscience.bayer.com
investor.bayer.com
sanssl1.bayer.com
career.bayer.com
sanssl10.bayer.com
www.seresto.se
qa-downloadcenter.bayer.nl
legaplus.bayer.de
drone.bayer.nl
sanssl19.bayer.com
es.bayer.be
www.canwelivebetter.bayer.de
sanssl3.bayer.com
es.bayer.be
sanssl10.bayer.com
bestel.bayer.nl
sanssl33.bayer.com
career.bayer.com
xarelto.com
one.bayer.com
www.canwelivebetter.bayer.de
secure.bayer.com
service.bayer.nl
secure.bayer.com
service.bayer.nl
www.cropscience.bayer.com
one.bayer.com
www.environmentalscience.bayer.com
one.bayer.com
one.bayer.com
healthcare.bayer.nl
www.canwelivebetter.bayer.de
legaplus.bayer.de
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
secure.bayer.com
legaplus.bayer.de
career.bayer.com

Certificate

The complete raw certificate details for service.bayer.nl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GEBxhNpMkeIvbd5XVBv
++6LmZTZi4bqYUVE7Bw8c2NFwEm0hupRXXunx7u+g72LX10q6tArfUaPlOUyKEDf
+3jUzxt/P0q1KOXdQV2/bihR9+Y8BKSxfqIBD6VyyUnQ1VSUQ1UKufTvUc0Yvd2R
54BSdOfNwjGo9F3+1qLCiCqr+ghIBC/ev1uXTeXypUyoc5yPC95x3h8BMXyTznQP
Es+zmGqNONQDR9b+jaASgewQyKEdDwPMJ+LjjRLl+GJkAB/9dV+KHSTNaXFL7HRM
FvvsQj7ja0XwzG8oTGXvRWjjkKEgA8SfRbRWhOKnciC+Kb4XY1U1YJxr0EK8kTrg
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 221197987621157053929901337035591572039
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51368'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Rhine-Westphalia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'service.bayer.nl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28325216211781459075607019046578639763874281351845266247346434716783850135394245089237863216301728173744951282672110843797826703473289716763796405572089104393636120356129068619676216222750446294156939403582182659248119708347679132612115843125518738461092730645411649013212752030833512186996348528332160996700318684427727795879929965228339190090771702082125776095426158072683832318715811410409057408204740178070282904798263363763384823509674578666358006457585992384565534565988383810197460319523022877321378599784946169243743829477916626469095603549725940935562312175361651602809852136268819368673654683882883804487709
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d9f39bfec13dfb03f885bd46ea990ae299a65f9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.bayer.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000167835e2d3f000004030046304402200db9d03d638a4eb2bb08c8c512532a1449e084104b8168b47ca6a58a291df0c702200eb847024cd109010b13eb5359c2eaddd1f147b1c75d0a579933aa03ec5a2ffb007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000167835e2d910000040300473045022079480a31053dc079b314db41e55e4d1eee7df9c79228e1b953189d369358ca1b022100a0e8f6a193e6e34197d6de5ee8d09bd509b97e04f38eb3d39b299c2e9ea2fa33
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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