bayer.at

Issued by R3

About this certificate

This digital certificate with serial number 04:66:3a:60:3d:ef:5d:d1:38:4d:dc:ed:2c:f5:0d:fa:f7:b9 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bayer.at

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:66:3a:60:3d:ef:5d:d1:38:4d:dc:ed:2c:f5:0d:fa:f7:b9
Serial Number (int): 383235540093422206024800166563907727194041
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: d9:01:8a:0c:13:3d:6a:cc:50:14:f4:0b:d3:dd:66:73:65:b2:de:32
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 3d:ed:cf:82:db:fc:07:9d:a6:c6:c8:5f:ec:ec:c6:8b:d6:3d:04:45
Fingerprint (sha256): 4f:72:b7:53:75:59:a7:eb:fc:6e:eb:4e:b6:a3:bd:9d:41:00:1c:f3:98:65:fd:9a:f1:4f:d9:3b:da:58:fd:6a

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayer.at

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayer.at

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bayer.at

Other certificates including the domain name bayer.at

(limited to 100 certificates)
apps.agrar.bayer.at
radiology.bayer.at
sanssl24.bayer.com
www.aspirin.hu
www.bepanthensoleil.fr
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
www.aspirin.hu
www.cropscience.bayer.com
agrar.bayer.at
wetter-pdf.agrar.bayer.at
www.bepanthensoleil.fr
secure.bayer.com
www.bepanthensoleil.fr
www.dermatology.bayer.at
www.cropscience.bayer.com
www.agrar.bayer.at
www.bepanthensoleil.fr
www.cropscience.bayer.com
xarelto.com
www.aspirin.hu
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.lampit.com
www.frauenaerzte.de
sanssl10.bayer.com
diabetes.bayer.at
www.canwelivebetter.bayer.de
www.bepanthensoleil.fr
www.cropscience.bayer.com
www.bepanthensoleil.fr
www.agrar.bayer.at
www.bepanthensoleil.fr
www.bayer.at
www.media.bayer.com
www.frauenaerzte.de
www.cropscience.bayer.com
www.bepanthensoleil.fr
www.bepanthensoleil.fr
www.cropscience.bayer.com
www.elevit.com.cn
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
www.bepanthensoleil.fr
www.bepanthensoleil.fr
sanssl10.bayer.com
www.bayer.at
sanssl19.bayer.com
www.canwelivebetter.bayer.de
www.bepanthensoleil.fr
sanssl10.bayer.com
xarelto.com
www.bepanthensoleil.fr
www.canwelivebetter.bayer.de
www.agrar.bayer.at
www.cropscience.bayer.com
www.bepanthensoleil.fr
www.canwelivebetter.bayer.de
sanssl24.bayer.com
www.canwelivebetter.bayer.de
www.aspirin.hu
www.cropscience.bayer.com
xarelto.com
www.bepanthensoleil.fr
www.cropscience.bayer.com
www.cropscience.bayer.com
www.agrar.bayer.at
www.frauenaerzte.de
app.bayer.at
mail.agrar.bayer.at
sanssl1.bayer.com
www.canwelivebetter.bayer.de
www.aspirin.hu
sanssl10.bayer.com
sanssl19.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
xarelto.com
sanssl10.bayer.com
xarelto.com
www.cropscience.bayer.com
www.dermatology.bayer.at
serviceportal.bayer.at
www.bepanthensoleil.fr
bayer.at
www.canwelivebetter.bayer.de
sanssl24.bayer.com
www.agrar.bayer.at
www.aspirin.hu
www.cropscience.bayer.com
sanssl10.bayer.com
www.agrar.bayer.at
sanssl19.bayer.com
www.agrar.bayer.at
apps.agrar.bayer.at
www.canwelivebetter.bayer.de
secure.bayer.com
www.media.bayer.com

Certificate

The complete raw certificate details for bayer.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 383235540093422206024800166563907727194041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 19:19:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-05 19:19:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayer.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 700711637737113916478021182951009911003727480272528945099227056479094952567333631394509950922133057115400806600209181586050471118687742896098264864252984623915315489173016810360970182687978130327665499544150970755286263236265935088784901183777498114045028622767933995470316621751768396247601022152472616715420788436830893957330234848704986939640723749611322133432397374794463580607362686177300297266021250382609618315483843786500232199896237136951482105234796152092828438326048362979052709252630212124647115118496473221976947276006182824645376208488289937712998067598314154391159108753332175397739170417640108114634931272066580420079271839498158821322762774804607030447996563246985132822365048379132760416342823350295435768455666369609683377034074728356088954857863645792616216223647655070138285140578958367116286609040197898501801720511797151085974342846595166373001385336283270513414100524582038239574676966660417575439363266995571165147493171443511434067987229487016057083084207832870461572889912949135331442144250099995320323318308390515604482157904145559330673375810804006910156344194389661188643137219998155254582365033835197331244657790717462986421332510969764219861744717240271201255144831816057855309831571144201567053588987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d9018a0c133d6acc5014f40bd3dd667365b2de32
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001875839c59e000004030047304502202edcf1059425c4f09d518fe12acf52b310e316630c3224e043b5524fd0dd74d4022100bf5e3945e5f088751178f7f6b183a202a56bfa47ee4dc7bdb04c08e7007edb82007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001875839c59300000403004830460221008f97633658d348912b1efae797e820fd3a9074b462a515b157c81226c01234090221009fc58f4bb7274fa6115d6a5d1563f34c21d168f6faf6f318b809880693f4e8b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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