stage.tradecertificates.bayercropscience.com

- Bayer Corporation -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:21:22:49 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Bayer Corporation

Organization: Bayer Corporation
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:21:22:49
Serial Number (int): 1277239881
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: ce:37:fa:0d:f8:01:18:3f:1b:01:67:1e:e8:8c:47:c9:43:3b:69:ab
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): de:22:36:c5:c9:b0:fe:f1:0f:2e:2a:e0:3f:b5:1a:45:fd:9b:23:37
Fingerprint (sha256): 38:71:74:37:ef:8a:bd:88:05:4d:35:7e:a9:5f:8f:6e:a4:d5:a8:03:9b:0b:78:0b:78:50:3c:63:e5:89:eb:9c

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate stage.tradecertificates.bayercropscience.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for stage.tradecertificates.bayercropscience.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

stage.tradecertificates.bayercropscience.com

Other certificates including the domain name bayercropscience.com

(limited to 100 certificates)
www.cteph.com
www.cteph.com
www.pressconference.bayercropscience.com
bulktanks.bayercropscience.com
one.bayer.com
www.cropscience.bayer.com
bulktanks.bayercropscience.com
webguide.bayercropscience.com
pft.bayercropscience.us
www.cropscience.bayer.com
www.cteph.com
www.webguide.bayercropscience.com
www.imagebank.bayercropscience.com
one.bayer.com
one.bayer.com
www.secure.bayercropscience.com
www.cropscience.bayer.com
www.pressconference.bayercropscience.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cteph.com
www.cteph.com
www.cropscience.bayer.com
www.cteph.com
www.cropscience.bayer.com
pft.bayercropscience.us
jira.bayercropscience.com
www.cropscience.bayer.com
www.cropscience.bayer.com
www.cropscience.bayer.com
bayercropscience.com
pft.bayercropscience.us
www.cteph.com
ehs-extranet.bayercropscience.com
www.imagebank.bayercropscience.com
www.secure.bayercropscience.com
pft.bayercropscience.us
orders.bayercropscience.com
pft.bayercropscience.us
one.bayer.com
ehs-extranet.bayercropscience.com
www.cteph.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
one.bayer.com
one.bayer.com
www.cropscience.bayer.com
tradecertificates.bayercropscience.com
orders.bayercropscience.com
pft.bayercropscience.us
www.secure.bayercropscience.com
stage.tradecertificates.bayercropscience.com
www.cropscience.bayer.com
www.cropscience.bayer.com
www.elabel.bayercropscience.com
www.cteph.com
elabel.bayer.com
pft.bayercropscience.us
www.secure.bayercropscience.com
one.bayer.com
bayercropscience.com
webguide.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.secure.bayercropscience.com
www.cropscience.bayer.com
pft.bayercropscience.us
ehs-extranet.bayercropscience.com
pft.bayercropscience.us
www.cteph.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
elabel.bayer.com
www.cteph.com
ehs-extranet.bayercropscience.com
pft.bayercropscience.us
orders.bayercropscience.com
pft.bayercropscience.us
imagebank.bayercropscience.com
webguide.bayercropscience.com
pft.bayercropscience.us
www.cteph.com
crop.bayer.com.au
pft.bayercropscience.us
www.secure.bayercropscience.com
www.cteph.com
ehs-extranet.bayercropscience.com
orders.bayercropscience.com
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
www.cteph.com
stage.tradecertificates.bayercropscience.com
one.bayer.com

Certificate

The complete raw certificate details for stage.tradecertificates.bayercropscience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+13Eo9HuJM8svPUHhpu
pgflxndg+u9kKzcw8ZD6cekIyIFxxf88kPEDLTlyc5eNxjbBwF98fHEqUkuCFKA0
IbAnqJRFVnP2NfFFcfdYXd6rZ/48HdaO4diOGEEqZ/CJ093CO9BIoGgtIUwCcTj1
5OulE/FsCFj3wQPXCBql+qXEN/Fck8jhqAGuAkp60RnQtC1bFWdHFXIR+OYb5ZyB
sLO4v5ku30wAyvztStHsDHMd1ZmpnDfjAJm01IhluGxynw2c7np3DmSZcutTveq/
RSrR/6UqzrucTTpTZcks/e0tuCUuc1dSek6wZaxqolrlP/t7jLOjXCiHyJ29FtRs
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277239881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-10-24 17:28:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-05 01:29:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.tradecertificates.bayercropscience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25238521106661727060770443076568019929373254761282063898925426200949850510151548470214796270949348494945539860531383830711073825184531326484308507717358901692663834226512083946219486222481603874431519785316579427754725189207710620998063460543545528383024663341465839120674865656132385995253859826018933754962950391039695162170285486194029943177739178129172287752473733153844055723182249732062335745911751246350181222639552379614838460536824450590102419721659819236667488262165267184587682201501997284703250449857587349743862027952958156038247232870429614596515109886785623464003667983057548406391734054671497330715831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.tradecertificates.bayercropscience.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce37fa0df801183f1b01671ee88c47c9433b69ab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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