secure.bayer.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:33:76:de:d7:f3:70:f2:24:9f:3f:1b:72:44:d9:45:80:f7 was issued on by Let's Encrypt.

With 87 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.bayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:33:76:de:d7:f3:70:f2:24:9f:3f:1b:72:44:d9:45:80:f7
Serial Number (int): 278849264481659279711406472106679829102839
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 0b:0b:88:04:83:6c:50:5b:2b:9c:cd:67:32:cd:ce:ab:de:43:fa:f8
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 9b:a3:ef:df:92:7e:b6:8c:71:d6:3f:11:95:52:5f:79:58:44:2d:38
Fingerprint (sha256): 35:78:ff:30:be:20:78:09:6a:e0:d6:70:bd:ff:c6:c5:d0:09:38:02:3a:03:47:79:b8:04:ff:12:b0:3e:23:78

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate secure.bayer.com

87

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

backedbybayer.com
career.bayer.be
career.bayer.bg
career.bayer.ch
career.bayer.cn
career.bayer.co.uk
career.bayer.com
career.bayer.com.mx
career.bayer.es
career.bayer.fr
career.bayer.in
career.bayer.it
career.bayer.jp
career.bayer.nl
career.bayer.ro
career.bayer.ua
career.bayer.us
career.nordic.bayer.com
carreiras.bayer.com.br
cdntest1.bayer.com
cdntest2.bayer.com
cdntest3.bayer.com
cms.identitynet.bayer.com
crop.bayer.com.au
cropscience.bayer.com
cropscience.bayer.de
hello.bayer.com
innovate.bayer.com
kadinsagligitv.com
karriere.bayer.de
netstore.video-streaming.bayer.com
omr.iamproheart.com
openinnovation.bayer.co.jp
p4u.bayer.com
s1.bayer.com
s2.bayer.com
s3.bayer.com
secure.bayer.com
shared.bayer.com
static.bayer.com
video-streaming.bayer.com
www.backedbybayer.com
www.bepanthen.de
www.canesten.de
www.career.bayer.be
www.career.bayer.bg
www.career.bayer.ch
www.career.bayer.cn
www.career.bayer.co.uk
www.career.bayer.com
www.career.bayer.com.mx
www.career.bayer.es
www.career.bayer.fr
www.career.bayer.in
www.career.bayer.it
www.career.bayer.jp
www.career.bayer.nl
www.career.bayer.ro
www.career.bayer.ua
www.career.bayer.us
www.career.nordic.bayer.com
www.carreiras.bayer.com.br
www.claritin.com
www.crop.bayer.com.au
www.cropscience.bayer.com
www.cropscience.bayer.de
www.drontalandadvantage.co.uk
www.drscholls.com
www.elevit.com.cn
www.elevit.de
www.eylea.jp
www.flintstonesvitamins.com
www.glufosinate-ammonium.com
www.hello.bayer.com
www.iamproheart.com
www.innovate.bayer.com
www.kadinsagligitv.com
www.karriere.bayer.de
www.mon-animal-et-moi.fr
www.patients.bayer.com
www.petbasics.com
www.thrombosisadviser.com
www.tv-footage.bayer.com
www.vetcentre.bayer.co.uk
www.webguide.bayer.com
www.xarelto.jp
www.your-life.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for secure.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4avv9PzAawjQAZcctYs
sd49s6kFpHF19K9mnc9rQJ5Fwc5XZfLYgK04VvfDckGK6fYrVDtUCenWphM4UI0t
9omH/8I5wL0Ti8cBEWDSgV6LEMQvHMUP1pHZvNfmCx97P+GnjKLOcDMfhaP3tb1W
TMlV3nUcQOrZLd9ssfhCRmFnr0j5ofyeKheudRyMAn/EHBYpzxDb65Vfp/bWYJaV
0HtaDHoIU26X4NPvHtIPKiimGJUlWhLd/20oLXw1em/SN/PV0h1AlCIdVoRN3tIi
YVZHgEXn17HbKJCvAGXXjfZH6s/VMssOOBaNZKGh1hO3nRyR3c8MDb0ewpQ8F9Po
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278849264481659279711406472106679829102839
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 08:40:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-21 08:40:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24177932647302612052914032456108037989320552770448345089736359286000843948765158398573026173293818307057676789828113380937673797303277858852965043269137785615160159271258789021845184153843612776751208109839945693133355270979926145185342252397678603022998907852801549652991288414630261351700181411864837047137050329106940661456981732131064116808188872954839548981625819792813756723067254626526611126977832502451075875161992049673666769943602813868192571115538350087320883011098401678931369379606685907546574749536507975998630195271482270283175191888896453187688406763473249301791239197343729799923095499102478874699923
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b0b8804836c505b2b9ccd6732cdceabde43faf8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1833 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.identitynet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadinsagligitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstore.video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omr.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinnovation.bayer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drontalandadvantage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drscholls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintstonesvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glufosinate-ammonium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kadinsagligitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mon-animal-et-moi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patients.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tv-footage.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webguide.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xarelto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-life.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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