sanssl16.bayer.com

- Bayer AG -

Issued by Corporation Service Company RSA OV SSL CA

About this certificate

This digital certificate with serial number 01:2a:0f:a2:95:90:06:66:f1:ef:96:fa:45:bd:e9:c9 was issued on by Corporation Service Company.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bayer AG

Organization: Bayer AG
State / Province: Nordrhein-Westfalen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:2a:0f:a2:95:90:06:66:f1:ef:96:fa:45:bd:e9:c9
Serial Number (int): 1547621581237142733786170530622990793
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4e:e7:d3:7a:08:c6:f9:66:75:2e:8b:27:4e:c5:21:98:ad:64:4d:e5
AuthorityKeyId: 38:d1:f4:0e:87:6c:16:37:1b:65:74:dd:26:ce:9e:cc:28:ac:22:1d

Fingerprint (sha1): 13:8a:25:41:80:75:07:13:31:f2:40:8b:d2:c0:51:43:b0:98:f6:29
Fingerprint (sha256): cb:a3:b3:86:e4:19:3a:ea:b7:9e:4b:26:aa:f6:43:9f:1d:88:3e:4e:42:0e:a7:cb:fe:79:27:a3:be:fa:da:0f

Issuing Certificate URL: http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl

Check the revocation status for certificate sanssl16.bayer.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanssl16.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sanssl16.bayer.com
club.bayer.it
consumerplatforms.bayer.com
hablemosdeldolor.com
kaz.bepanthen.com
labeling.bayercare.com
salud.shop.bayer.es
www.aspirin-japan.com
www.aspirin.at
www.aspirin.bg
www.aspirin.de
www.aspirin.hu
www.bepanthen.at
www.bepanthen.bg
www.bepanthen.ch
www.bepanthen.co.uk
www.bepanthen.com
www.bepanthen.com.mx
www.bepanthen.fi
www.bepanthen.lv
www.bepanthen.no
www.bepanthen.se
www.bepanthenderma.ch
www.bepanthengamme.fr
www.bepanthenol.it
www.bepanthol.com.ar
www.bepanthol.com.tr
www.bepanthol.de
www.bepantholsensiderm.com
www.berocca.ch
www.berocca.co.id
www.berocca.ee
www.berocca.fi
www.berocca.se
www.beroccagamme.fr
www.brand.aspirin.com
www.canesten.at
www.canesten.ch
www.canesten.com.hk
www.canesten.com.uy
www.canesten.fi
www.canesten.it
www.canesten.no
www.canesten.se
www.canesten.si
www.claritin.bg
www.dam-assets.bayer.com
www.dermacalm.ch
www.elevit.ch
www.elevit.com.hr
www.elevit.lv
www.elevit.si
www.euphytosegamme.fr
www.germoloids.co.uk
www.guclusaclar.com
www.lefax.de
www.oneux.de
www.priorin.ch
www.priorin.com.tr
www.priorin.de
www.priorin.dk
www.priorin.fi
www.priorin.se
www.redoxon.com.tr
www.redoxon.ro
www.redoxonzinc.com
www.rennie.ch
www.rennie.de
www.rennie.ee
www.rennie.fi
www.rennie.lv
www.rennierelief.com.au
www.shop.bayer.jp
www.supradyn.at
www.supradyn.be
www.supradyn.ch
www.supradyn.com.tr
www.talcid.de
www.theranal.nl
www.xn--pretuvalgrippeunderkltung-4ec.ch

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for sanssl16.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYoW70yG1lOtXBaYRSnJ
f5D0qIZlo+nfD8ZAKzwy0k52uQW9Dqs2AsMREjm57B341ROHi8A47k9PO1OgQsYS
mQoOCcRf6ubakjCXfVO3nIYf4O4823S9MltGlcBUVmcHsLh9EJE5AdaBxG1Iu5fo
InhzzM3YndDIQg2WwXMIHUt5YZ5p3X/h2oUQA66ngIjvEth/06YC5vIDR4qNIlmq
AZ41jW8ErWMSMqaDmILZ1Yg/mFmNSXoESrSk/xpIYPUP0zcJUUhEVBP7yiNmpL07
3VXVYD4BJLWUHCxdkknd/zI+aRQTeg60IMQiNql5/NqHYU7v78Hq3jikmTKx2McZ
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1547621581237142733786170530622990793
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company RSA OV SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sanssl16.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20897414833609447234802769434676682769968046633663356861933810362090602019543510987641416442503410177280857186866655925429481398715955859078951197981264133819748895637363133919671788538816081441462884299715472380218501936040943426234980802289930374385748262955047608536252016929380486445062395683139327505327627299959246028437241067043022521718151476835170143719106716945389753270722438259468092615348906922060914140209403524040110161981574082367788490477100030155079586308869193748354571835033053418525962877099030957034943572937892055973113161635579316861429263555427120058377172654605200060113699473066133224364399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 38d1f40e876c16371b6574dd26ce9ecc28ac221d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ee7d37a08c6f966752e8b274ec52198ad644de5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/CorporationServiceCompanyRSAOVSSLCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1514 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanssl16.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consumerplatforms.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hablemosdeldolor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kaz.bepanthen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'labeling.bayercare.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salud.shop.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirin-japan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirin.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirin.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthenderma.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthengamme.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthenol.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthol.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthol.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthol.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepantholsensiderm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berocca.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beroccagamme.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brand.aspirin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.com.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.com.uy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dam-assets.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dermacalm.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.com.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.euphytosegamme.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.germoloids.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.guclusaclar.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lefax.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oneux.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.priorin.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redoxon.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redoxon.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.redoxonzinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennie.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennie.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennie.ee'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennie.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennie.lv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rennierelief.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shop.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supradyn.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supradyn.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supradyn.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.supradyn.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.talcid.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theranal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xn--pretuvalgrippeunderkltung-4ec.ch'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		007e82d7629f01283c54155f72f35507445b31f9eea4f1ab29616c52453f6e2c50eb0b633854e0f4176ac3c917ca24c53d8d68ea58010bec26eed5eb88b094f7b6227635740c51b95800f9b3890d20487a4c8679f24b4b586fb52435ae8a8ea344222ce147891e1123d5395ffb086711410e4ae4aeafc8392f18b8937ada7699bf9ced56fc825d5e4311092a74fa4f14d1e16e97f0084597fc14ec9fde44332887a9cbec8bdc75441040fe9b33bd2567b66e68f604ccb4fe3e44ce6937ba376d39ff797b173d7aeb1234d37b16829fef122076e6285fe46b332a0ce18ecccca461a5d4fa4c764a0baca1a3c77cc768821e2a638b0716db9f4b2cba70159c964a1ea0d552c2b0dbb55259520bbebc5064152e57d58d7a80f617e9aac87fc6734b3a7b48b787025c6c6bd0ea3bdcee692895e9659d9576f0d4bc2c4541d794e20023cf302f4f94d1670aaacc1349315777eaf6d980773a7b67b9224078fc4741580057837a38e1d75e7793cbc594df33b2cac860bf3a754e3dbd941e103f17c3acb0