sanssl22.bayer.com

- Bayer AG -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number 24:26:3b:6b:55:68:06:56:b9:60:a5:b1:a2:c9:4c:b9 was issued on by Corporation Service Company.

With 52 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bayer AG

Organization: Bayer AG
State / Province: Nordrhein-Westfalen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 24:26:3b:6b:55:68:06:56:b9:60:a5:b1:a2:c9:4c:b9
Serial Number (int): 48050720294893283403291346937439669433
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 10:98:71:53:f3:91:05:e5:b0:71:7a:d9:01:d4:f5:d0:cc:64:ab:64
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): b1:72:d6:30:52:d3:69:ec:40:43:e9:6f:fc:e5:cb:69:17:51:c9:51
Fingerprint (sha256): 9f:ca:02:07:84:f3:d8:1c:e8:2d:4e:97:e6:da:7a:89:04:93:f2:65:a8:4a:d0:f2:0f:d0:84:9f:8f:09:3f:a8

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate sanssl22.bayer.com

52

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanssl22.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanssl22.bayer.com
advancing.bayer.com
advancing.bayer.de
cancer-patients.bayer.com
commoditycatalog.bayer.com
dev.ace.cm.bayer-gastronomie.de
dev.ace.cm.bayer.co.nz
dev.ace.cm.bayer.co.uk
dev.ace.cm.bayer.com.au
dev.ace.cm.bayer.com.br
dev.ace.cm.bayer.com.cn
dev.ace.cm.bayer.com.tr
dev.ace.cm.bayer.com.tw
dev.ace.cm.bayer.in
dev.ace.cm.bayer.jp
dev.ace.cm.bayerzyduspharma.com
dev.ace.cm.conosur.bayer.com
dev.ace.cm.gesundheit.bayer.de
dev.ace.cm.idnet.bayer.com
dev.ace.cm.kultur.bayer.de
dev.ace.cm.pallas-versicherung.de
dev.ace.cm.patientassistance.bayer.us
dev.ace.cm.pharma.bayer.jp
dev.agro.bayer.co
dev.agro.bayer.cr
dev.agro.bayer.ec
dev.agro.bayer.gt
dev.asgrow.com.mx
dev.cropscience.bayer.sk
dev.micultivo.bayer.com.mx
hcp.cteph.com
qa-cropcentre.bayer.com.au
qa-termiteprotection.bayer.com.au
qa.agro.bayer.co
qa.agro.bayer.cr
qa.agro.bayer.ec
qa.agro.bayer.gt
qa.asgrow.com.mx
qa.cropscience.bayer.sk
qa.micultivo.bayer.com.mx
www.bayer.com
www.bcclabelingecu.com
www.career.bayer.co.hu
www.career.bayer.co.kr
www.cuestiondeciencia.bayer.es
www.elevit.uz
www.g4a.health
www.kagayaki-school.jp
www.karadano-mikata.jp
www.public-health.jp
www.rheinische-pensionskasse.de
www.srdcove-zlyhavanie.sk

Other certificates including the domain name bayer.com

(limited to 100 certificates)
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com
*.genetic-data.509537612977.cloud.bayer.com
www.aspirin.hu
syreon.org
shareholderservice.bayer.com

Certificate

The complete raw certificate details for sanssl22.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx3hCPyGJ5Gjn0dnpiqy
08umVFOQTJ9DT2DPJPWXdRVwbezvjVo7qyOMEtzsqH38xTi8rt52SY6QBNBo14gP
6FS31Gzyl1V/4P4J+Qcp9RTdj8QqJ9rkI7MTuNi+HnkYTGV7iyrBNQnLOTUvHCFT
7OF/b4uuWFVTODwiNiaJ73r0nRlT9EorNlMby+3GcRHpKaGZw0AUZXvNcgw01aZQ
l10fCQUiykS6S8By2tId59mOBPZkVo/gIPL8SgNrUpF5sqdJcYVGjAnLsPLD+q2c
NOhNpDkoPWd5S5hikLIhnHxNcHfnYXy4WOLlnw7xRiR0hyBgW1tCout4fyPV/qpK
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 48050720294893283403291346937439669433
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanssl22.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24631203373808299748726367230450307294975713712421282794571194213433720534272403480218153063991182473113327787831650643211298553325424523020348774721464222880475906231992712739197863980641138360937486711026782659655021905896106830268090991462568811039683205000847065614802455808480977098543844941739345127457673148816614217001038127597941995152020953375510728297844828942114840265123886956544353074153792236083679700352118797005559907024774857564202984686911119193629147549371628292186163743020967391335630923300508462941978769803992944307861357107330734759971818855193499195704472769192496632247405681579369966488301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10987153f39105e5b0717ad901d4f5d0cc64ab64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018cc9e500d60000040300473045022100a634a6b596012ddaab431b23dca65b0a48cdcb7b75c29360e7e9e7d5a5d8eaef02203a87d1be0eae810899d8fe68f8097a184c14622a370c0740aacde1e4e0155af40075003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018cc9e5008a000004030046304402200cd3b7b977a9a8918c72c7cd8a65da45160338ec9dd9303dbace0a136be49374022042026a8e0aac4921a9baf4e2177170683f91e283cdcf6de42aeb2612c4a7d648
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1270 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanssl22.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancing.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advancing.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cancer-patients.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commoditycatalog.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer-gastronomie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.co.nz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.bayerzyduspharma.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.conosur.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.gesundheit.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.idnet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.kultur.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.pallas-versicherung.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.patientassistance.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.ace.cm.pharma.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agro.bayer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agro.bayer.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agro.bayer.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.agro.bayer.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.asgrow.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cropscience.bayer.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.micultivo.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcp.cteph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-cropcentre.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa-termiteprotection.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.agro.bayer.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.agro.bayer.cr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.agro.bayer.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.agro.bayer.gt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.asgrow.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.cropscience.bayer.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qa.micultivo.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcclabelingecu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuestiondeciencia.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.uz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.g4a.health'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kagayaki-school.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karadano-mikata.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.public-health.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rheinische-pensionskasse.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.srdcove-zlyhavanie.sk'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		001d06b1a824b75deab6985bc38b6eb5889d64211c481032a52ce3bbb3e1620bcc56f9c43c565778d2163b03b5d23ffb1189503b91dac513c6aaa79b40a14ae984c9b0ca0a8bcfe1bd26507ce8aaeb3f9307cfe8e09468acd4c7ecd9dc5471d687a6a037bed868091f07d9085028dbc762fd8711a8e95e8d4306c3323ce3ad8de62e80f64488427649d2bab197f75fb9bea9536014a11e3de2e5060027b5c80360e48fa16c474e94f3c5aee6b57f60b5edb0d43425d2cc412a1ac41a235a9956b944029de401f567e4daccf394c2515128f02e0ab1190388b5d65eed80a64903beaa189c5011b1a3e7c95e76a99444fa2cb081ad7fbf71dcb27531ac81bbe5f8f15a8169c2a88d1c0922a4726ab5d98213f6af3143cdeea18d7129225103b4d6d02e2bcee48653c1bee4eee8d18874f3ac3c707e01b8795206c5bd79a59da1f90c53f24fdbd9c4c4f328ef6333ed900ae97b6da600c324f913b079078a56239d54be92525e49c0ac849196558f4aca0b7a2ca50a137049fffc971695ab03d5b177