sanssl24.bayer.com

- Bayer AG -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number fd:2c:5a:7c:cc:a8:5a:1a:0f:ec:44:f9:ed:08:bb:cf was issued on by Corporation Service Company.

With 58 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bayer AG

Organization: Bayer AG
State / Province: Nordrhein-Westfalen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): fd:2c:5a:7c:cc:a8:5a:1a:0f:ec:44:f9:ed:08:bb:cf
Serial Number (int): 336524979299854195714430368692488944591
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c4:61:ec:58:84:26:5a:c3:51:e6:10:e4:87:af:60:61:6f:fe:93:ed
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): 64:24:09:80:33:29:d2:c2:cd:88:88:9b:16:08:1b:c5:a5:1d:56:fa
Fingerprint (sha256): 34:30:e2:d1:91:38:2d:e2:52:aa:b1:61:ae:d0:f4:6e:ae:43:47:ef:ad:2a:47:c3:b6:97:84:de:b1:90:6e:47

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate sanssl24.bayer.com

58

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanssl24.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanssl24.bayer.com
agro.bayer.co
apps.agrar.bayer.at
consentement.bayer.fr
deruiter.bayer.com
dev.cropscience.bayer.com
everybeginning.elevit.com.au
hcp.kerendia.co.uk
impulso.bayer.co
kometa.agro.bayer.com.pl
mailody.bayercropscience.fr
miportal.bayer.com
patient.kerendia.co.uk
preview.cs-contentapi.bayer.com
previewstage.cs-contentapi.bayer.com
prod.cropscience.bayer.com
prod2.cropscience.bayer.cl
qa-admin-cropcentre.bayer.com.au
qa-resources.bayer.com.au
release.cropscience.bayer.com
seminis.bayer.com
shared.bayer.com
stage.cropscience.bayer.com
teamup4sc.int.bayer.com
test.cropscience.bayer.dz
test.cropscience.bayer.ma
test.deruiter.bayer.com
test.seminis.bayer.com
test.vegetables.bayer.com
test.vegetableseeds.bayer.com
vegetableseeds.bayer.com
www.bayer.co.nz
www.bayer.com.au
www.bayercropscience.ie
www.bayerfispq.com.br
www.berocca.com.kh
www.cropscience.bayer.com
www.cropscience.bayer.ma
www.environmentalscience.bayer.ca
www.environmentalscience.bayer.co
www.environmentalscience.bayer.co.cr
www.environmentalscience.bayer.com.gt
www.environmentalscience.bayer.com.vn
www.environmentalscience.bayer.pe
www.feedabee.com
www.firialta.com.br
www.flexsolutions.bayer.us
www.gazdahaszna.hu
www.info-cardiovascular.ca
www.info-oncology.ca
www.kerendia.co.uk
www.kerendiahcp.com
www.kothrine.com.br
www.tackletd.com.au
www.vegetables.bayer.com
www.xarelto-info.co.uk
www.your-life-me.com
www2.soranavi-drone.jp

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for sanssl24.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIILXjCCCcagAwIBAgIRAP0sWnzMqFoaD+xE+e0Iu88wDQYJKoZIhvcNAQEMBQAw
ZzELMAkGA1UEBhMCVVMxJDAiBgNVBAoTG0NvcnBvcmF0aW9uIFNlcnZpY2UgQ29t
cGFueTEyMDAGA1UEAxMpQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55IFJTQSBP
ViBTU0wgQ0EwHhcNMjQwNjEwMDAwMDAwWhcNMjUwNzA5MjM1OTU5WjBbMQswCQYD
VQQGEwJERTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjERMA8GA1UEChMI
QmF5ZXIgQUcxGzAZBgNVBAMTEnNhbnNzbDI0LmJheWVyLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAM/LFi8EUfVR+Ty7ylraNbirdxAbhUw5FQ/u
k8Y4s7q2sEIKrwlZWd9PO7PYLEK91z0HDS+kJ9nDDe/LWZnfUcrQsaYB0cJKqR62
8X/Q7S3N7RxjF7tL87QCIecCidzhyvG9JiUTXwCGdf9U6MlzHzvCizHW45EsygZu
eAY6INyKm9Fy5+mDJXeGj1prYBUDPvOrJuvtR7S0ytZbyZzBKxQWYZ6oR40eoNKL
SQGSNdjnXdUOezUgOpv5sYGYnejErosu6jlCmJaByr75IvxqDGG1FAhqBnF9nKND
SNEUDNs7wM/HJXG0c6Uag+yzp2zLgDJHg+4SdUAwBuXlWQNlbAUCAwEAAaOCB48w
ggeLMB8GA1UdIwQYMBaAFDjR9A6HbBY3G2V03SbOnsworCIdMB0GA1UdDgQWBBTE
YexYhCZaw1HmEOSHr2Bhb/6T7TAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIw
ADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwSQYDVR0gBEIwQDA0Bgsr
BgEEAbIxAQICCDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3RpZ28uY29tL0NQ
UzAIBgZngQwBAgIwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDovL2NybC5zZWN0aWdv
LmNvbS9Db3Jwb3JhdGlvblNlcnZpY2VDb21wYW55UlNBT1ZTU0xDQS5jcmwwfwYI
KwYBBQUHAQEEczBxMEoGCCsGAQUFBzAChj5odHRwOi8vY3J0LnNlY3RpZ28uY29t
L0NvcnBvcmF0aW9uU2VydmljZUNvbXBhbnlSU0FPVlNTTENBLmNydDAjBggrBgEF
BQcwAYYXaHR0cDovL29jc3Auc2VjdGlnby5jb20wEwYKKwYBBAHWeQIEAwEB/wQC
BQAwggXYBgNVHREEggXPMIIFy4ISc2Fuc3NsMjQuYmF5ZXIuY29tgg1hZ3JvLmJh
eWVyLmNvghNhcHBzLmFncmFyLmJheWVyLmF0ghVjb25zZW50ZW1lbnQuYmF5ZXIu
ZnKCEmRlcnVpdGVyLmJheWVyLmNvbYIZZGV2LmNyb3BzY2llbmNlLmJheWVyLmNv
bYIcZXZlcnliZWdpbm5pbmcuZWxldml0LmNvbS5hdYISaGNwLmtlcmVuZGlhLmNv
LnVrghBpbXB1bHNvLmJheWVyLmNvghhrb21ldGEuYWdyby5iYXllci5jb20ucGyC
G21haWxvZHkuYmF5ZXJjcm9wc2NpZW5jZS5mcoISbWlwb3J0YWwuYmF5ZXIuY29t
ghZwYXRpZW50LmtlcmVuZGlhLmNvLnVrgh9wcmV2aWV3LmNzLWNvbnRlbnRhcGku
YmF5ZXIuY29tgiRwcmV2aWV3c3RhZ2UuY3MtY29udGVudGFwaS5iYXllci5jb22C
GnByb2QuY3JvcHNjaWVuY2UuYmF5ZXIuY29tghpwcm9kMi5jcm9wc2NpZW5jZS5i
YXllci5jbIIgcWEtYWRtaW4tY3JvcGNlbnRyZS5iYXllci5jb20uYXWCGXFhLXJl
c291cmNlcy5iYXllci5jb20uYXWCHXJlbGVhc2UuY3JvcHNjaWVuY2UuYmF5ZXIu
Y29tghFzZW1pbmlzLmJheWVyLmNvbYIQc2hhcmVkLmJheWVyLmNvbYIbc3RhZ2Uu
Y3JvcHNjaWVuY2UuYmF5ZXIuY29tghd0ZWFtdXA0c2MuaW50LmJheWVyLmNvbYIZ
dGVzdC5jcm9wc2NpZW5jZS5iYXllci5keoIZdGVzdC5jcm9wc2NpZW5jZS5iYXll
ci5tYYIXdGVzdC5kZXJ1aXRlci5iYXllci5jb22CFnRlc3Quc2VtaW5pcy5iYXll
ci5jb22CGXRlc3QudmVnZXRhYmxlcy5iYXllci5jb22CHXRlc3QudmVnZXRhYmxl
c2VlZHMuYmF5ZXIuY29tghh2ZWdldGFibGVzZWVkcy5iYXllci5jb22CD3d3dy5i
YXllci5jby5ueoIQd3d3LmJheWVyLmNvbS5hdYIXd3d3LmJheWVyY3JvcHNjaWVu
Y2UuaWWCFXd3dy5iYXllcmZpc3BxLmNvbS5icoISd3d3LmJlcm9jY2EuY29tLmto
ghl3d3cuY3JvcHNjaWVuY2UuYmF5ZXIuY29tghh3d3cuY3JvcHNjaWVuY2UuYmF5
ZXIubWGCIXd3dy5lbnZpcm9ubWVudGFsc2NpZW5jZS5iYXllci5jYYIhd3d3LmVu
dmlyb25tZW50YWxzY2llbmNlLmJheWVyLmNvgiR3d3cuZW52aXJvbm1lbnRhbHNj
aWVuY2UuYmF5ZXIuY28uY3KCJXd3dy5lbnZpcm9ubWVudGFsc2NpZW5jZS5iYXll
ci5jb20uZ3SCJXd3dy5lbnZpcm9ubWVudGFsc2NpZW5jZS5iYXllci5jb20udm6C
IXd3dy5lbnZpcm9ubWVudGFsc2NpZW5jZS5iYXllci5wZYIQd3d3LmZlZWRhYmVl
LmNvbYITd3d3LmZpcmlhbHRhLmNvbS5icoIad3d3LmZsZXhzb2x1dGlvbnMuYmF5
ZXIudXOCEnd3dy5nYXpkYWhhc3puYS5odYIad3d3LmluZm8tY2FyZGlvdmFzY3Vs
YXIuY2GCFHd3dy5pbmZvLW9uY29sb2d5LmNhghJ3d3cua2VyZW5kaWEuY28udWuC
E3d3dy5rZXJlbmRpYWhjcC5jb22CE3d3dy5rb3RocmluZS5jb20uYnKCE3d3dy50
YWNrbGV0ZC5jb20uYXWCGHd3dy52ZWdldGFibGVzLmJheWVyLmNvbYIWd3d3Lnhh
cmVsdG8taW5mby5jby51a4IUd3d3LnlvdXItbGlmZS1tZS5jb22CFnd3dzIuc29y
YW5hdmktZHJvbmUuanAwDQYJKoZIhvcNAQEMBQADggGBALOLL7zVNY49EeZNNl/D
bkBkUChNfc38pxXnqo63cwLamT9SWGPywKhn/PaArVo+CUhC3pfMezg0DWev3F5k
Eut1c7XwS/wZ4/wzLtqAB/CKdZ3h/6Q/R1K4cXJyNNbfYDwAUfZhB8Y6T222vJVF
/ZqGq+L4FMUVa2Lm+yPzJQSyL+Kfr0K8NyOeSf70uZRgoEa2QCMfzdDzax9P9ieC
+Rr9iK7s7vnTdvy1RcNBpu/f4pyL+LB4FEQlUzQiaQ1ejxGI7Y7r0Z9u4shwfsbt
qbWy1hJjxuXL+raRISoQnpB4jZjOLAFRmusjUQpYJJnq/eVNNsAu9DwnTffUyxXJ
Dw3YsWw0rVIGEe2SJAPhbKHklOl2y1whKVoJaGvolzu50Eowa2lMNrAaTbTY7mYs
ltyWOwBW50w4MEK5232FDTEEnFblYrUQO7ZqQcQQgNufpXHP69r4hOxBIoWZaT1i
/sWA17t5wuh99Vk8UancwGXAxY3Zh5dap7fgK5/X02wVOA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8sWLwRR9VH5PLvKWto1
uKt3EBuFTDkVD+6TxjizurawQgqvCVlZ3087s9gsQr3XPQcNL6Qn2cMN78tZmd9R
ytCxpgHRwkqpHrbxf9DtLc3tHGMXu0vztAIh5wKJ3OHK8b0mJRNfAIZ1/1ToyXMf
O8KLMdbjkSzKBm54Bjog3Iqb0XLn6YMld4aPWmtgFQM+86sm6+1HtLTK1lvJnMEr
FBZhnqhHjR6g0otJAZI12Odd1Q57NSA6m/mxgZid6MSuiy7qOUKYloHKvvki/GoM
YbUUCGoGcX2co0NI0RQM2zvAz8clcbRzpRqD7LOnbMuAMkeD7hJ1QDAG5eVZA2Vs
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 336524979299854195714430368692488944591
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanssl24.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26231474889999141688606711281275819209799234919138249117747023949942111065493317253650267005105531908462234285427837182797830374373466716578190106999745875653084928221053131585669196756260470587763849904147887272113101689742329922229428570581620673235545116585195934001772650504337160519301715659788974342853228425802121406085128449415806483946100701658610439685966259690096382300351568346861486814978261897130843590193860008334295191587523960050744616807130335939898305029662720685722576558744590786208817039721894858146456209687511961038688431850815288298257712910002520111311329124048446142743864238626989005958149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c461ec5884265ac351e610e487af60616ffe93ed
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanssl24.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agro.bayer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.agrar.bayer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consentement.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deruiter.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'everybeginning.elevit.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcp.kerendia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impulso.bayer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kometa.agro.bayer.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailody.bayercropscience.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miportal.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patient.kerendia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.cs-contentapi.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'previewstage.cs-contentapi.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod2.cropscience.bayer.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-admin-cropcentre.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-resources.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'release.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seminis.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teamup4sc.int.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cropscience.bayer.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cropscience.bayer.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.deruiter.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.seminis.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.vegetables.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.vegetableseeds.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vegetableseeds.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayercropscience.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayerfispq.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.co.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.com.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.environmentalscience.bayer.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.feedabee.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.firialta.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flexsolutions.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gazdahaszna.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info-cardiovascular.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.info-oncology.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerendia.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kerendiahcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kothrine.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tackletd.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vegetables.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xarelto-info.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-life-me.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.soranavi-drone.jp'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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