www.canwelivebetter.bayer.de

- Bayer AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number ae:ff:38:59:54:4d:ea:60:9b:10:82:e6:0c:f8:59:5d was issued on by Corporation Service Company.

With 63 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer AG

Organization: Bayer AG
Organization unit: Bayer Business Services GmbH
Organization unit: Unified Communications
Address: Kaiser-Wilhelm-Allee 1
Postal code: 51306
State / Province: NRW
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ae:ff:38:59:54:4d:ea:60:9b:10:82:e6:0c:f8:59:5d
Serial Number (int): 232610849857836946122528801316723513693
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ff:e3:e3:c9:51:04:8e:7d:71:18:70:2e:ca:6d:43:86:54:30:e8:b4
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): d3:2a:64:32:84:08:17:03:c7:ed:39:1d:b2:dd:aa:f2:89:7a:8b:5b
Fingerprint (sha256): 79:c7:0c:ec:38:ab:77:8c:e0:e4:31:ce:8a:1d:45:69:89:bc:5b:69:9c:a3:56:8f:44:76:20:51:ee:e2:c6:9f

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.canwelivebetter.bayer.de

63

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.canwelivebetter.bayer.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.canwelivebetter.bayer.de
andina.bayer.com
animalhealth.bayer.com
applause.bayer.com.au
bayerlink.com.au
centroamerica.bayer.com
emo.bayer.es
events.bayer.ch
events.bayer.nl
finance-academy.bayer.com
fispq.bayer.com.br
gencbilimelcileri.bayer.com.tr
harmony.bayer.jp
mashup.bayer.se
pharma.bayer.com
service.bayer.nl
smallmeetings.bayer.es
stage.aprendecon.bayer.com
www.bayer-gastronomie.de
www.bayer-weimar.de
www.bayer.at
www.bayer.be
www.bayer.bg
www.bayer.ch
www.bayer.co.kr
www.bayer.co.th
www.bayer.co.za
www.bayer.com.ar
www.bayer.com.pl
www.bayer.com.tr
www.bayer.com.vn
www.bayer.cz
www.bayer.ee
www.bayer.es
www.bayer.fi
www.bayer.fr
www.bayer.gr
www.bayer.hr
www.bayer.ie
www.bayer.in
www.bayer.jp
www.bayer.lt
www.bayer.lv
www.bayer.mx
www.bayer.nl
www.bayer.no
www.bayer.plus
www.bayer.pt
www.bayer.ro
www.bayer.rs
www.bayer.ru
www.bayer.se
www.bayer.si
www.bayer.sk
www.bayer.ua
www.bayerjovens.com.br
www.baylab.bayer.com.pl
www.canwelivebetter.bayer.com
www.canwelivebetter.bayer.com.ar
www.canwelivebetter.bayer.com.br
www.corporateshop.bayer.com
www.investor.bayer.com
www.mieuxvivrecestpossible.bayer.fr

Other certificates including the domain name bayer.de

(limited to 100 certificates)
sanssl11.bayer.com
cropscience.bayer.gr
investor.bayer.com
www.bayer.com
trainingportal-s.bayer.de
pft.bayercropscience.us
legaplus.bayer.de
sanssl3.bayer.com
www.aspirin.me
cropscience.bayer.gr
www.antikoncepce.cz
www.antikoncepce.cz
es.bayer.be
www.iberogast.es
www.seresto.se
career.bayer.com
www.tierfreunde.bayer.de
forms.bayer.com
slides.bayer.de
www.aspirin.hu
shareholderservice.bayer.com
idnet.bayer.com
www.iberogast.es
hcp.nubeqa-us.com
www.research.bayer.com
sanssl13.bayer.com
research.bayer.de
sanssl13.bayer.com
www.cropscience.bayer.com
sanssl20.bayer.com
career.bayer.com
www.seresto.com.au
www.canwelivebetter.bayer.de
www.iberogast.es
www.seresto.se
www.antikoncepce.cz
bonbcsd.bayer.de
webguide.bayercropscience.com
sanssl11.bayer.com
www.aspirin.hu
sanssl9.bayer.com
environmentalscience.bayer.com.au
www.cropscience.bayer.com
fakturace.bayer.cz
laif-webinar.bayer.de
www.antikoncepce.cz
pft.bayercropscience.us
www.webguide.bayercropscience.com
oncology.bayer.com
www.antikoncepce.cz
trainingportal.bayer.de
www.1095dias.mx
www.seresto.com.au
smtpmx03.bayer.de
laif-webinar.bayer.de
www.seresto.com.au
click.news.gesundheit.bayer.de
www.antikoncepce.cz
www.antikoncepce.cz
sanssl13.bayer.com
ophthalmologie.bayer.de
www.bepanthensoleil.fr
www.aspirin.me
leganto.bayer.de
career.bayer.com
secure.bayer.com
bayer.de
www.aspirin.me
www.seresto.com.au
www.canwelivebetter.bayer.de
pft.bayercropscience.us
rivaroxaban.slides.bayer.de
www.bepanthensoleil.fr
www.media.bayer.com
pft.bayercropscience.us
sanssl13.bayer.com
www.seresto.com.au
www.seresto.se
www.cropscience.bayer.com
www.seresto.se
sanssl3.bayer.com
www.bayerhealthcare.com
www.bepanthensoleil.fr
xarelto.com
pft.bayercropscience.us
www.tierfreunde.bayer.de
fakturace.bayer.cz
bayer.de
www.aspirin.hu
crop.bayer.com.au
bonbcsd.bayer.de
career.bayer.com
www.canwelivebetter.bayer.de
bonbcsd.bayer.de
sanssl3.bayer.com
www.investor.bayer.de
www.cropscience.bayer.com
career.bayer.com
www.canwelivebetter.bayer.de
legaplus.bayer.de

Certificate

The complete raw certificate details for www.canwelivebetter.bayer.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1U0YuqR2TUXmrkR5w8Iu
5TvX28jFJa+SLpCEmyiF+Fe+dyvhHkzLt62zY1J6FEkw1cGEDIw8TnHtAb/6hub7
nvxxsYj8gR+m219Y2p0wGZHThzBhJXLTkjv36jPF12/5+rCd6j77DgudTa1K+OkX
TwqJ6k9dcjy44lJiyfIcUAVk6l3y5xp0EfyBZxs4XGjNpD7LWroVpaEewLuxEQn9
dZOdGEcPsg4yqMYTGpgTAp4HdFtGKa3E8Th8DXnS19bCiD8n97a/xfiHhuzT9ZDu
/6sQyws0p3OBYdlFo1/wMZpmsbjATMu7C18BQYljZAnCFEGPDUNPq2W36MN5hZIf
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 232610849857836946122528801316723513693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51306'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.canwelivebetter.bayer.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26926776707154377769888319952108389603532612184839055795840032305251539434819207826981518511289474391173531653310378626926597979078339415530511443117762633789620056507710661836560779068002400401567286589736094442675604989311650600672340640746551248172600806165491821724809330746316662795135072337787558015190481486880920105955322862560912860956673227643783244550131951402133344578678235041588090145301239386911766134887601120012359861895469220722766588248628265023396747216723057527283264368685364179433926893642692928365171640208526776815963138904321487912504254256172174356053959612649143156218716975283829719834591
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ffe3e3c951048e7d7118702eca6d43865430e8b4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwelivebetter.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'andina.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalhealth.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'applause.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayerlink.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'centroamerica.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emo.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'events.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finance-academy.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fispq.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gencbilimelcileri.bayer.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harmony.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mashup.bayer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pharma.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'service.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallmeetings.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.aprendecon.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer-gastronomie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer-weimar.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.lt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.plus'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayerjovens.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylab.bayer.com.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwelivebetter.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwelivebetter.bayer.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canwelivebetter.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corporateshop.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investor.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mieuxvivrecestpossible.bayer.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0024ad1480dc8fd81b1ee9862dfb7d46ed9470ed846583cbe26d7cca1ad427338c6cb49dc36eeafa548c1d13fd99dda8a92dab1caf92c2e54f3927fe41a5304cb93bf6943494ca2db83d0853e30fb1a42a1826273d8d3e34297822c47b6d4f7c85bac03a9da75cbf9d2355dd77870d539ccb3ec06e123d8cafcdef3a1fd4de31c35a266b4797bc7b5220b0d7d7843a667d086fff7a17148a4d20d08396617fe662bcc1ce36b4be782828a2a41ad92c72168756bfe8d38675d63a11199099127c7fce76003c0c0c1f151b90a614f1a36fe1bdc0c46b5f49bfbc8620cb6348040f0036e5c91592782ea7fd82c49d78c203a76fdef35ecd32f6761a625f964fcf3a40