bayercropscience.us

Issued by R3

About this certificate

This digital certificate with serial number 04:48:30:f9:76:b8:7e:88:36:93:7c:1e:3e:87:c0:35:cb:49 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bayercropscience.us

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:48:30:f9:76:b8:7e:88:36:93:7c:1e:3e:87:c0:35:cb:49
Serial Number (int): 373014572379005482006236566897371129432905
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 6d:5d:bf:3d:8a:c1:09:4b:27:2e:e2:d3:1f:7c:90:23:f6:00:6e:bf
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 2d:89:14:94:74:81:1a:d3:71:3e:36:28:2d:93:2b:2f:40:17:96:64
Fingerprint (sha256): 5e:f0:10:29:d0:f7:1d:ee:92:df:16:75:e5:02:f5:63:84:b2:17:ff:d4:6c:7e:a7:a0:80:94:cb:33:97:d2:90

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayercropscience.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayercropscience.us

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bayercropscience.us

Other certificates including the domain name bayercropscience.us

(limited to 100 certificates)
pft.bayercropscience.us
bayerfallsolutions.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
institute.bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
communications.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
sni.cloudflaressl.com
ssl6388.cloudflare.com
www.cropscience.bayer.com
ssl509823.cloudflaressl.com
www.cropscience.bayer.com
beehealth.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
sanssl8.bayer.com
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl509824.cloudflaressl.com
bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.balanceflexx.us
stage.connect.bayercropscience.us
ssl98712.cloudflaressl.com
ssl313692.cloudflaressl.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
bayerkillsbees.com
connect.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
www.cropscience.bayer.com
www.cropscience.bayer.com
bayercropscience.us
pft.bayercropscience.us
ssl509823.cloudflaressl.com
ssl509824.cloudflaressl.com
pft.bayercropscience.us
ssl509824.cloudflaressl.com
connect.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
www.cropscience.bayer.com
sni111960.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
cropscience.bayer.us
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
ssl98712.cloudflaressl.com
pft.bayercropscience.us
ssl509825.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
ssl313694.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us
bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
bayerkillsbees.com
pft.bayercropscience.us
pft.bayercropscience.us
ssl98712.cloudflaressl.com
ssl509823.cloudflaressl.com
ssl98712.cloudflaressl.com
pft.bayercropscience.us
pft.bayercropscience.us

Certificate

The complete raw certificate details for bayercropscience.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 373014572379005482006236566897371129432905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-27 09:29:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-25 09:29:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayercropscience.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 622502622847062691519145401146921250576758001363502796561295903185633612347232611964923079314569719772231263830322491598576621067207859305531694368468326315992812184378288697088390150068240680598379783607879580245235645199231721459442824234195455309555030625104247458498286910934064046302576683721346090130492363385253200552644887230048977071200341905997523853885625691496219890569466017035892597300829067208763178328320932932367594875911908129461546195571713577598883063442831286903597069524622191634976466046238733160327187689069318001411782795532623586239364559818759421702758458405428933280495817899013492897847734388217352982959026693960596951363041326865390781856266021984518471433345527050967798945288753744115249056342598993208172272132727615894113756735024167521887773395825628838621356524120684172450663394826397038618463195467555271780435848992789219245210127882139478050975510443409413382274537686772686481686096799393248192595134102522681311095271099450443730837604860788228281442486099169794804927874451656896575589693237313245418433372497181073705692469269561945626637769121492346446555954161996521240655945284478113000097645798608730842658238929290037924197955374091795721110002902663122357897569681724642376481144231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6d5dbf3d8ac1094b272ee2d31f7c9023f6006ebf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayercropscience.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184b8a239c100000403004630440220637925531879d436b900f195bb308041eb3be410d321c3644aee2fe46de17264022029e2f48677aa46e6ec6eb52935b44522fbdd748068cf09fcb4498383bf8288fb007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000184b8a23b910000040300473045022100c6f20cd601508b9572cc46dc2e098cb6f4160d777edf3e06e12d413195778f6a0220108486ae035c1c7dbbaba5cb83d0847518e7fb1d4bd19dab46050142f9ca847e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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