secure.bayer.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:5a:30:bb:a3:01:1b:3c:3d:1b:ac:ce:df:c0:5c:a1:3d:e3 was issued on by Let's Encrypt.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=secure.bayer.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:5a:30:bb:a3:01:1b:3c:3d:1b:ac:ce:df:c0:5c:a1:3d:e3
Serial Number (int): 292027048027595846103367097434841223871971
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: f1:20:73:62:7d:ca:34:c9:ec:d8:54:34:d1:6f:75:86:b8:5e:2c:e1
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 46:56:ae:7a:5f:a4:5b:c3:16:cd:96:2e:a9:69:d1:f4:55:61:96:47
Fingerprint (sha256): 86:61:e3:a2:80:7f:e9:5f:b1:e3:42:15:41:d6:e5:7c:e4:01:e9:11:54:68:79:7b:c9:91:1e:e5:90:db:13:f7

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate secure.bayer.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agro.bayer.com.br
backedbybayer.com
career.bayer.be
career.bayer.bg
career.bayer.ch
career.bayer.cn
career.bayer.co.uk
career.bayer.com
career.bayer.com.mx
career.bayer.es
career.bayer.fr
career.bayer.in
career.bayer.it
career.bayer.jp
career.bayer.nl
career.bayer.ro
career.bayer.ua
career.bayer.us
career.nordic.bayer.com
carreiras.bayer.com.br
cdntest1.bayer.com
cdntest2.bayer.com
cdntest3.bayer.com
cms.identitynet.bayer.com
crop.bayer.com.au
cropscience.bayer.com
cropscience.bayer.de
hello.bayer.com
innovate.bayer.com
kadinsagligitv.com
karriere.bayer.de
netstore.video-streaming.bayer.com
omr.iamproheart.com
openinnovation.bayer.co.jp
p4u.bayer.com
s1.bayer.com
s2.bayer.com
s3.bayer.com
secure.bayer.com
shared.bayer.com
static.bayer.com
video-streaming.bayer.com
www.agro.bayer.com.br
www.backedbybayer.com
www.bepanthen.de
www.canesten.de
www.career.bayer.be
www.career.bayer.bg
www.career.bayer.ch
www.career.bayer.cn
www.career.bayer.co.uk
www.career.bayer.com
www.career.bayer.com.mx
www.career.bayer.es
www.career.bayer.fr
www.career.bayer.in
www.career.bayer.it
www.career.bayer.jp
www.career.bayer.nl
www.career.bayer.ro
www.career.bayer.ua
www.career.bayer.us
www.career.nordic.bayer.com
www.carreiras.bayer.com.br
www.claritin.com
www.crop.bayer.com.au
www.cropscience.bayer.com
www.cropscience.bayer.de
www.drontalandadvantage.co.uk
www.drscholls.com
www.elevit.com.cn
www.elevit.de
www.eylea.jp
www.flintstonesvitamins.com
www.glufosinate-ammonium.com
www.hello.bayer.com
www.iamproheart.com
www.innovate.bayer.com
www.kadinsagligitv.com
www.karriere.bayer.de
www.mon-animal-et-moi.fr
www.patients.bayer.com
www.petbasics.com
www.thrombosisadviser.com
www.tv-footage.bayer.com
www.vetcentre.bayer.co.uk
www.webguide.bayer.com
www.xarelto.jp
www.your-life.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for secure.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5LLsTaQtuennHz7iecc
Ay6BhnfHIh2AHbjIRFZD4Rn3RzxDYTQqTZ30+LQe6fDVZqEouRW1Lmql0CbPEhCT
oGvqaJJDMPkRmrPCi3DbGX6djzqkeXp2mrUlN90FFJZa7bZilAURCBbv0TQN9Wp7
Kh9eUKv0zaLH3zU++YmvVM5HKJ+29p0QNdWqSoSY7Xpr6aEtgsp/4BM1oKGkHaAO
KXYNZUS5lszR/t5tPZq5wu55+SyaJMLJXAk/xarLHju3Nk4Hwg1S3w920nmTzvea
TUG2SYx/lSwTAIM6LV0vdOoKG6YpspTi+XnOhrOc4b2fdX122nHaOOpLSwLdO6I7
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 292027048027595846103367097434841223871971
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 16:38:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-21 16:38:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26203716772160209729576240782872989650507410955195203161186730950707619753518354013676565368802728948883248141287957690152270397723989173548609152670192461767831561382798045226932772214066025050177317604271186245965143943439031457494184595372098554094283648574906129574494895722617793921022192824017376866589640013500396056341169499358477938033911487666218964528584204108432986328932180008937213411151524008322500107927018650262320571017172715700185148008645804996727028412649020170603003146322568573493456837858423959201963809803149590082640083336213822408643829228904222599861936277591779883533899054623101364091701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f12073627dca34c9ecd85434d16f7586b85e2ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1875 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agro.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.identitynet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kadinsagligitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstore.video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omr.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinnovation.bayer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agro.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drontalandadvantage.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drscholls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintstonesvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glufosinate-ammonium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kadinsagligitv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mon-animal-et-moi.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patients.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tv-footage.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webguide.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xarelto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-life.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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