www.secure.bayercropscience.com

- Bayer AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number e0:e0:4d:2a:fa:db:93:d8:f6:ad:e2:37:a6:65:5a:36 was issued on by Corporation Service Company.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer AG

Organization: Bayer AG
Organization unit: Bayer Business Services GmbH
Organization unit: Enterprise SSL
Address: Kaiser-Wilhelm-Allee 1
Postal code: 51306
State / Province: NRW
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): e0:e0:4d:2a:fa:db:93:d8:f6:ad:e2:37:a6:65:5a:36
Serial Number (int): 298911710702891969096945120310246857270
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: cd:d4:4b:0e:68:a5:ad:c2:8d:d1:58:c0:c9:37:7b:02:09:25:98:2e
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): b4:d1:6e:ef:1d:34:eb:a7:2a:53:56:2e:36:65:a0:43:0d:07:06:34
Fingerprint (sha256): 74:0f:d9:51:24:ab:07:d3:64:28:58:85:68:1f:5f:85:83:02:20:fa:7b:74:ff:55:25:fa:d8:d4:e1:ed:cc:d0

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.secure.bayercropscience.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.secure.bayercropscience.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.secure.bayercropscience.com
secure.bayercropscience.com

Other certificates including the domain name bayercropscience.com

(limited to 100 certificates)
www.cteph.com
www.cteph.com
www.pressconference.bayercropscience.com
bulktanks.bayercropscience.com
one.bayer.com
www.cropscience.bayer.com
bulktanks.bayercropscience.com
webguide.bayercropscience.com
pft.bayercropscience.us
www.cropscience.bayer.com
www.cteph.com
www.webguide.bayercropscience.com
www.imagebank.bayercropscience.com
one.bayer.com
one.bayer.com
www.secure.bayercropscience.com
www.cropscience.bayer.com
www.pressconference.bayercropscience.com
pft.bayercropscience.us
pft.bayercropscience.us
pft.bayercropscience.us
www.cteph.com
www.cteph.com
www.cropscience.bayer.com
www.cteph.com
www.cropscience.bayer.com
pft.bayercropscience.us
jira.bayercropscience.com
www.cropscience.bayer.com
www.cropscience.bayer.com
www.cropscience.bayer.com
bayercropscience.com
pft.bayercropscience.us
www.cteph.com
ehs-extranet.bayercropscience.com
www.imagebank.bayercropscience.com
www.secure.bayercropscience.com
pft.bayercropscience.us
orders.bayercropscience.com
pft.bayercropscience.us
one.bayer.com
ehs-extranet.bayercropscience.com
www.cteph.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
one.bayer.com
one.bayer.com
www.cropscience.bayer.com
tradecertificates.bayercropscience.com
orders.bayercropscience.com
pft.bayercropscience.us
www.secure.bayercropscience.com
stage.tradecertificates.bayercropscience.com
www.cropscience.bayer.com
www.cropscience.bayer.com
www.elabel.bayercropscience.com
www.cteph.com
elabel.bayer.com
pft.bayercropscience.us
www.secure.bayercropscience.com
one.bayer.com
bayercropscience.com
webguide.cropscience.bayer.com
pft.bayercropscience.us
www.cropscience.bayer.com
pft.bayercropscience.us
www.secure.bayercropscience.com
www.cropscience.bayer.com
pft.bayercropscience.us
ehs-extranet.bayercropscience.com
pft.bayercropscience.us
www.cteph.com
pft.bayercropscience.us
www.cropscience.bayer.com
one.bayer.com
pft.bayercropscience.us
pft.bayercropscience.us
elabel.bayer.com
www.cteph.com
ehs-extranet.bayercropscience.com
pft.bayercropscience.us
orders.bayercropscience.com
pft.bayercropscience.us
imagebank.bayercropscience.com
webguide.bayercropscience.com
pft.bayercropscience.us
www.cteph.com
crop.bayer.com.au
pft.bayercropscience.us
www.secure.bayercropscience.com
www.cteph.com
ehs-extranet.bayercropscience.com
orders.bayercropscience.com
pft.bayercropscience.us
pft.bayercropscience.us
www.cropscience.bayer.com
www.cteph.com
stage.tradecertificates.bayercropscience.com
one.bayer.com

Certificate

The complete raw certificate details for www.secure.bayercropscience.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6zCCBtOgAwIBAgIRAODgTSr625PY9q3iN6ZlWjYwDQYJKoZIhvcNAQELBQAw
gYYxCzAJBgNVBAYTAlVTMQswCQYDVQQIEwJERTETMBEGA1UEBxMKV2lsbWluZ3Rv
bjEkMCIGA1UEChMbQ29ycG9yYXRpb24gU2VydmljZSBDb21wYW55MS8wLQYDVQQD
EyZUcnVzdGVkIFNlY3VyZSBDZXJ0aWZpY2F0ZSBBdXRob3JpdHkgNTAeFw0xODA1
MTYwMDAwMDBaFw0xOTA1MTYyMzU5NTlaMIHeMQswCQYDVQQGEwJERTEOMAwGA1UE
ERMFNTEzMDYxDDAKBgNVBAgTA05SVzETMBEGA1UEBxMKTGV2ZXJrdXNlbjEfMB0G
A1UECRMWS2Fpc2VyLVdpbGhlbG0tQWxsZWUgMTERMA8GA1UEChMIQmF5ZXIgQUcx
JTAjBgNVBAsTHEJheWVyIEJ1c2luZXNzIFNlcnZpY2VzIEdtYkgxFzAVBgNVBAsT
DkVudGVycHJpc2UgU1NMMSgwJgYDVQQDEx93d3cuc2VjdXJlLmJheWVyY3JvcHNj
aWVuY2UuY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAygz+uwPq
ApUsJFTeu12SkcnMZK2kCSuVFsHqG9YrgZmBglt/iNjWXrqqlW2K4wMXnqrhPgk5
ZQtixbxw2tyy8ezzsGN5kFsPrCP0mfFUIpNcc2s2rw435vxwrcr1sMuTzv71pmVw
vBAd1KndxbeA5oP+qnlTyc/QgdVKUCBA43PRgoPfpZF7jFIyH05BGuev7mukb0aS
t755ZksN3CQbz3zVkOrYPbJhD5th8PkNNZx/rUb21sbscGXNv8/ZKaQVcimZHo9D
X68Joh77McWP0ThNYVaejOsgEUeKjfTNoJXHEr/kC0jvat8cHK7yWVkFPCU3VTcR
gVYObV/3X/kflW9aPAq7Cm487zJ1NnFWZm9d97YbbzqBF0B2Sc8jANmjZC15rCTs
FBfpLQxInTHo2uPttCr4OVAw5N5VzCpDHQZkz3y+OBfy9iZ0rE4UUL+QNNH9iOrd
4CzRqhioxks3GNzA4y4bSYCTcO85blB+7csHUjK0pvlus+I71b5FGFu3Q2Yaa01N
tu7MXz2LzBEOAVtt8hn10/ci+nrdx4ck4j8Bl+KiMFBIhnNBYzzP7nIyyZxj9old
n3GiFTrz0hkGZ+G+mQWSyGbWYGOFF5CaHyKKlHbphYw7bAMCnvy/RIXFiBP6G4oU
YmV8s9ejbm2Ex7dCE5hnUqjUklRo01Rw+bECAwEAAaOCAvgwggL0MB8GA1UdIwQY
MBaAFPK7Ve78j8/QPxRoGpV+eQ6rFzD0MB0GA1UdDgQWBBTN1EsOaKWtwo3RWMDJ
N3sCCSWYLjAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwSwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICCDAn
MCUGCCsGAQUFBwIBFhlodHRwczovL2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAEC
AjBQBgNVHR8ESTBHMEWgQ6BBhj9odHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVHJ1
c3RlZFNlY3VyZUNlcnRpZmljYXRlQXV0aG9yaXR5NS5jcmwwgYIGCCsGAQUFBwEB
BHYwdDBLBggrBgEFBQcwAoY/aHR0cDovL2NydC51c2VydHJ1c3QuY29tL1RydXN0
ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1dGhvcml0eTUuY3J0MCUGCCsGAQUFBzABhhlo
dHRwOi8vb2NzcC51c2VydHJ1c3QuY29tMEcGA1UdEQRAMD6CH3d3dy5zZWN1cmUu
YmF5ZXJjcm9wc2NpZW5jZS5jb22CG3NlY3VyZS5iYXllcmNyb3BzY2llbmNlLmNv
bTCCAQYGCisGAQQB1nkCBAIEgfcEgfQA8gB3AO5Lvbd1zmC64UJpH6vhnmajD35f
sHLYgwDEe4l6qP3LAAABY2jDy9QAAAQDAEgwRgIhAPHYgRNXuVYCKQkxRyED1de8
7GaRBYVxZc8M73lG866GAiEA6oJ6t0YRfgztPvchLza/+G53Ul2rjpOMrPtYymOY
zl0AdwBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAWNow8v1AAAE
AwBIMEYCIQCaFt4pLnf5Fq8tAxvDze/8A+5I/B27Sm2RoTOuSd6B5wIhAJ2M7W0q
/PTXQvWwwsCQEU+/KcCeRspLxDNxTmFIwhqUMA0GCSqGSIb3DQEBCwUAA4IBAQAj
ZfuQnrsI8ND5MPDETl191ODc+3WkgkaElzY7GZGkMPmyhzHcsF3PObODjVaF3cTZ
0BBm8ldsfCKLJ8LJ4iU/6dG6FzeCRSUbBvHv/DcdKj/B3T1MkO0Ps9bmlPBeWbgx
8azKN+mVarOn8zyTFYYJTN6a5FuhrZkoxtOp/IlwLd1geqhsv9iaTfa+a/whmZ/S
hV2rmHkDdX2dx4fEFboybMMa9w2CSdIGkmzANzhK9o/9Vf4A2ePm842SS+BZGf07
kcGf4tjg+DBPpQDKNyMk0WAwEfhKKlUqDYubnrphX+AH21j9Wu+d1jGD2gA/DSeK
efKxEeJijEd4huWNcrqA
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 298911710702891969096945120310246857270
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51306'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.secure.bayercropscience.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 824295192140248637392170651380270179940712177388340374696509237986810431229681452122160732065605349629859610104956228452597982890216653616296710954610536728024119668121650127009442133481430124719491937074996870852187343902572386081602017775198205351073145243659794463105735236145947205188620220995983437630615863476014792207861622274242267778765774014586964368851246814025504180617021836286370574534763154737053724817643363571504154778751845804259143975618519246653933530713655091714247403455524530103155269578119798379384482953374855099653243445880273991152853201535334589423903956974760232464139188314164464967699164532749666380124437102502578620831021725683315145137040130632490900975795269761995005372267793079578444781285415639851462994810909268292001625576680343180318960857691933544823752335888240089530768871218511663764141370692448517774342584365403139718048663067437155363823905513534784601190665686982953924201028341955411428429521590799717184294532028860875625666134916432730907855107946576827782614121792068714418790086469442448917717528999787339551475444900401296615782244367758123528223528704990718048978537598485856987915002524335833215095378374944715998127086917503699108097733352892032547652204225266048029877664177
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cdd44b0e68a5adc28dd158c0c9377b020925982e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secure.bayercropscience.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bayercropscience.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016368c3cbd40000040300483046022100f1d8811357b95602290931472103d5d7bcec669105857165cf0cef7946f3ae86022100ea827ab746117e0ced3ef7212f36bff86e77525dab8e938cacfb58ca6398ce5d0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016368c3cbf500000403004830460221009a16de292e77f916af2d031bc3cdeffc03ee48fc1dbb4a6d91a133ae49de81e70221009d8ced6d2afcf4d742f5b0c2c090114fbf29c09e46ca4bc433714e6148c21a94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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