www.1095dias.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:cf:ab:f8:1b:eb:60:bc:cd:89:b4:81:01:22:15:92:60:fa was issued on by Let's Encrypt.

With 95 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.1095dias.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:cf:ab:f8:1b:eb:60:bc:cd:89:b4:81:01:22:15:92:60:fa
Serial Number (int): 332003893991088755427378165879132830982394
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 6a:4f:53:e4:e6:3a:6d:e2:3f:92:8d:cd:f2:7e:38:9f:9f:d0:95:f7
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): ce:bb:9e:80:6c:37:e1:88:96:a0:72:85:a9:fc:32:fa:32:b9:a3:51
Fingerprint (sha256): 4e:58:58:74:8d:ed:09:04:bb:67:d2:db:a0:49:7d:41:41:42:33:fe:98:08:65:30:99:2f:4f:0a:c3:40:d9:13

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.1095dias.mx

95

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.1095dias.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

animalhealth.bayer.ca
consent.bayer.ca
diabetes.ascensia.ie
diabetes.bayer.ie
fanpage.bepantol.com.br
idnet.bayer.com
mascotas.bayer.com.mx
programasuperar.bayer.com.br
www.1095dias.mx
www.actron.com.ar
www.adbabyhcp.com
www.adempas-us.com
www.afrin.com
www.aleve.com
www.aleveextrafuerte.com
www.alevehcp.com
www.alka-seltzer.com.mx
www.alkaseltzer.com
www.alkaseltzerbruluresdestomac.ca
www.alkaseltzerplus.com
www.alkaseltzerreliefchews.ca
www.aspirina-ca.com
www.aspirina100.com.co
www.atagius-us.com
www.audioaspirina.com.ec
www.bayer.ca
www.bayer.com.br
www.bayeraspirinhcp.com
www.bayercarepro.com
www.baykomm.bayer.com
www.baykomm.bayer.de
www.baylab.bayer.com
www.baylab.bayer.de
www.bbnovalac.mx
www.bepanthen.com.co
www.bepanthol.cl
www.berlex.com
www.beta-plus.com.ar
www.bhcextpartneraepctraining.com
www.buyberocca.com
www.canesten.ca
www.canesten.com.co
www.canestenv.com.mx
www.cardioaspirina-ca.com
www.chronostrials.com
www.citracal.com
www.citracalhcp.com
www.clarispray.com
www.claritin.ca
www.claritinespanol.com
www.clubdemascotas.com.co
www.colaborator.bayer.com
www.contournextpro.com
www.contourone.com
www.coppertone.com
www.coppertone.com.mx
www.cuidateya.mx
www.cuidomicorazon.com.pe
www.culture.bayer.com
www.demo.cteph.com
www.diabetes.ascensia.pl
www.diabetes.bayer.ie
www.elevit.jp
www.empecid.jp
www.essure.com
www.essuremedicalresources.com
www.eylea-publications.com
www.finaceafoam.com
www.glc-in.bayer.com
www.glc-in.bayer.de
www.hcp-samples.bayer.com
www.hptec.com.mx
www.kovaltry.com
www.kultur.bayer.de
www.livewell.bayer.com
www.livingwithhemophilia.com
www.mcrpceducation.bayer.com
www.me.diabetes.ascensia.com
www.msms.bayer.us
www.mymedicinecabinet.ca
www.natele-ca.com
www.nexavarbrandbook.com
www.optivista.com.br
www.pinnwand.bayer.de
www.prenatal-navi.jp
www.radiologysolutions.bayer.com
www.research.bayer.com
www.research.bayer.de
www.sanidadanimal.bayer.com.mx
www.saudeanimal.bayer.com.br
www.savingscard.bayer.com
www.stivarga.com
www.video-center.bayer.com
www.video-center.bayer.de
www.viviralogrande.com.mx

Other certificates including the domain name 1095dias.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.1095dias.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9YEUBhYuq+qRm2YRAepU
Wb30KlENYCeFx6BZcgOdiU8HPU2Wui8bq8VKJnKhlcRxtiwTMLijVlYdhGdRLxho
WtyVQLTsJGC9nLsi1/8Nc6p+f5S9GiEdKfunZULx2AddCmZ8jekrNu+PpHtgQxhE
28QAkO3NKZ4UiEbY9d3YWHQFqVjQK5eyaq2LNmCqT78NlXlRyn5IJAlDQ/bD5327
sgK7y4PwJeYIhfRGhXd9PB7jTlRA1pamC0XM0EiycwwLIhPhSkBq+/h8ccg7gJyS
4IJE0bRVJmCvl4s90BiMb3uREyuzwYOxZibePuPj445Xdt9PwEcG05E4Bh+OcsS5
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 332003893991088755427378165879132830982394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-18 11:33:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-16 11:33:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1095dias.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30992035558217828784642911282035407287837538115829320486828280046617078049147086900352441617597109261171481857145022671888477346756778925524265207344079760919526199080312641294532393553085457721550900890935991672762697788940847415123240090784808446729245548858593684828390086123724771787109121833054822888056531083264195781135097458730153856691054436669718156079247864251309940116805785363253283875306231622863912087325881241891091224863439543228561925563347984236735505062702087394378697117856554513061845946770733963731988119455520347632443224844640645946264938719462094636572745870725877105959283058908149492005131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6a4f53e4e63a6de23f928dcdf27e389f9fd095f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalhealth.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.ascensia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.bayer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanpage.bepantol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mascotas.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programasuperar.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1095dias.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actron.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adbabyhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adempas-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afrin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleveextrafuerte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alevehcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alka-seltzer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerbruluresdestomac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerreliefchews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirina-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirina100.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atagius-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audioaspirina.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayeraspirinhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayercarepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baykomm.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baykomm.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylab.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylab.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnovalac.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthol.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-plus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhcextpartneraepctraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyberocca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canestenv.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardioaspirina-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chronostrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citracal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citracalhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarispray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritinespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdemascotas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colaborator.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contournextpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contourone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppertone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppertone.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuidateya.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuidomicorazon.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culture.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.cteph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.ascensia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.bayer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empecid.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essuremedicalresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea-publications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finaceafoam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glc-in.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glc-in.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp-samples.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hptec.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovaltry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kultur.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livewell.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithhemophilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcrpceducation.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.diabetes.ascensia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.msms.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mymedicinecabinet.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natele-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexavarbrandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.optivista.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnwand.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prenatal-navi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiologysolutions.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanidadanimal.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudeanimal.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingscard.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stivarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video-center.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video-center.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viviralogrande.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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