bayer.gr

Issued by R3

About this certificate

This digital certificate with serial number 04:ad:99:8d:bd:7f:30:11:19:98:64:41:71:85:cb:d0:51:57 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=bayer.gr

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:ad:99:8d:bd:7f:30:11:19:98:64:41:71:85:cb:d0:51:57
Serial Number (int): 407522101045027753987467240739478921302359
Serial Number lenght: 139 bits, 18 octets

SubjectKeyId: 23:62:fc:ea:2e:2d:a5:a0:ac:78:bd:84:86:c0:0b:13:ec:9e:d3:9c
AuthorityKeyId: 14:2e:b3:17:b7:58:56:cb:ae:50:09:40:e6:1f:af:9d:8b:14:c2:c6

Fingerprint (sha1): 48:db:51:f0:6a:69:3f:9f:8f:20:7e:cd:c3:16:84:03:84:34:e0:1e
Fingerprint (sha256): 7a:d4:b6:c6:9e:68:40:d5:01:18:4e:26:23:ac:04:4c:11:99:cb:82:a5:d9:1e:13:93:c2:a1:3f:39:29:3b:dd

Issuing Certificate URL: http://r3.i.lencr.org/

Revocation information

OCSP Server: http://r3.o.lencr.org

Check the revocation status for certificate bayer.gr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bayer.gr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bayer.gr

Other certificates including the domain name bayer.gr

(limited to 100 certificates)
cropscience.bayer.gr
cropscience.bayer.gr
sanssl13.bayer.com
sanssl13.bayer.com
bayer.gr
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
sanssl13.bayer.com
sanssl13.bayer.com
www.cropscience.bayer.com
www.cropscience.bayer.com
www.bayer.gr
bayer.gr
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
www.canwelivebetter.bayer.de
one.bayer.com
sanssl13.bayer.com
www.cropscience.bayer.com
www.cropscience.bayer.com
one.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
bayer.gr
bayer.gr
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
www.bayer.gr
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
sanssl13.bayer.com
cropscience.bayer.gr
cropscience.bayer.gr
www.cropscience.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
sanssl10.bayer.com
www.cropscience.bayer.com
www.canwelivebetter.bayer.de
cropscience.bayer.gr
sanssl17.bayer.com
sanssl10.bayer.com
www.cropscience.bayer.com
cropscience.bayer.gr
euromedic.bayer.gr
www.canwelivebetter.bayer.de
sanssl28.bayer.com
www.cropscience.bayer.com
sanssl13.bayer.com
sanssl10.bayer.com
sanssl17.bayer.com
www.diabetes.bayer.gr
www.canwelivebetter.bayer.de
www.bayer.gr
www.canwelivebetter.bayer.de
www.canwelivebetter.bayer.de
sanssl13.bayer.com
sanssl10.bayer.com
www.bayer.gr
one.bayer.com
sanssl10.bayer.com
one.bayer.com
sanssl10.bayer.com
www.canwelivebetter.bayer.de
sanssl17.bayer.com
www.canwelivebetter.bayer.de
bayer.gr
sanssl17.bayer.com
bayer.gr
sanssl-ms02.cropscience.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.cropscience.bayer.com
euromedic.bayer.gr
www.bayer.gr
sanssl10.bayer.com
one.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.canwelivebetter.bayer.de
sanssl13.bayer.com
www.canwelivebetter.bayer.de
www.cropscience.bayer.com
diabetes.bayer.gr
cropscience.bayer.gr
www.cropscience.bayer.com
sanssl13.bayer.com
sanssl13.bayer.com
sanssl10.bayer.com
sanssl10.bayer.com
sanssl13.bayer.com

Certificate

The complete raw certificate details for bayer.gr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 407522101045027753987467240739478921302359
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'R3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-28 12:46:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-26 12:46:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bayer.gr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 794578403014314140298950910845804616951181274600894361362151859303930302714879690285194368506209837666550012994573720862391567864559806158997844682830851786188619513899197605970601453835585615040625371614432765749635781200021759440899119186711025285897402008982150555447413357447725125510081515399075235053876297249362243988473549810081268069544476844755782265762433931147354077066867630512429684817508527007702537260239230867707225139158898543195376504157407315803231790267674328316006750837966235124816479299694236996280037677903076230636755220769343170459684037416834355522537490417431408306192519908524911537135449954504141524184452398834791147217234275238005049328895716055520714473589871265018693745696880229157787674565029616673483558688818354914071201007468458937110663010866644423003917807111261201111612796841868455955497910440920128681237789003663350548912031019980527364238528404371454985569911675776677773016164972751970700161742655868400609741430492218564587453681110187330998796346041329297005388265486422271412726911579998184675821429992164429918342221697770629906146428306266235943914236442760621198731335204467415144389045934701673407336846803087121994785708282958463096760733126520577718512546864468323597116776427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2362fcea2e2da5a0ac78bd8486c00b13ec9ed39c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 142eb317b75856cbae500940e61faf9d8b14c2c6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.o.lencr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://r3.i.lencr.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bayer.gr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018a3c65d0260000040300483046022100a68b7728cae0882279585d0afa98b745fa75bca4f5acf48bebdd1b6a41ac5a350221009afb14bfd430c18566be6dbeb3ca21dc649c2d856559b4995b7d6e5b941ae931007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018a3c65d02e0000040300483046022100bb4fc8c9b8846dcdef9fbc9456454912be4d76c536c46564c40cbe3aec421e7d022100a71de0281fa0c86ad64c69c2e2908486fc0d645bb3ec874f5aeb84b18ea93fc6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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