sanssl1.bayer.com

- Bayer Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 5e:ca:06:22:17:c3:fb:21:df:e0:0d:fa:a6:9e:75:4d was issued on by GeoTrust Inc..

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayer Corporation

Organization: Bayer Corporation
Organization unit: IT
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:ca:06:22:17:c3:fb:21:df:e0:0d:fa:a6:9e:75:4d
Serial Number (int): 125996399964776356328508499007387891021
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 7d:45:d3:0f:7e:9b:b6:e9:7c:06:06:fc:e8:4d:e0:d6:2d:15:b1:4a
Fingerprint (sha256): cd:b1:99:11:3a:a6:9b:21:3b:43:e0:dd:e4:2a:1d:f5:64:f2:31:10:1d:69:86:58:cb:e2:1f:87:18:9e:84:30

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sanssl1.bayer.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanssl1.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.your-life.com
www.xarelto.jp
www.thrombosisadvisor.com
www.thrombosisadviser.com
www.suspendpolyzone.com
www.petbasics.com
www.mytempridstory.com
www.maxforceroachsystem.com
www.maxforceonamission.com
www.maxforceimpact.com
www.maxforceantsolutions.com
www.glufosinate-ammonium.com
www.flintstonesvitamins.com
www.eylea.jp
www.elevit.de
www.drscholls.com
www.claritin.com
www.canesten.de
www.bepanthen.de
ppmlogin.backedbybayer.com
vmlogin.backedbybayer.com
www.backedbybayer.com
openinnovation.bayer.co.jp
omr.iamproheart.com
www.iamproheart.com
es.bayeradvanced.com
extranet.bayeradvanced.com
www.bayeradvanced.com
elevit.com.cn
www.elevit.com.cn
crop.bayer.com.au
www.crop.bayer.com.au
carreiras.bayer.com.br
www.carreiras.bayer.com.br
career.bayer.us
cropscience.bayer.us
www.career.bayer.us
www.cropscience.bayer.us
career.bayer.ua
www.career.bayer.ua
career.bayer.ro
www.career.bayer.ro
career.bayer.nl
www.career.bayer.nl
career.bayer.jp
www.career.bayer.jp
career.bayer.it
www.career.bayer.it
career.bayer.in
www.career.bayer.in
career.bayer.fr
www.career.bayer.fr
career.bayer.es
www.career.bayer.es
career.bayer.de
cropscience.bayer.de
karriere.bayer.de
www.career.bayer.de
www.cropscience.bayer.de
www.karriere.bayer.de
career.bayer.com.mx
www.career.bayer.com.mx
career.bayer.co.uk
vetcentre.bayer.co.uk
www.career.bayer.co.uk
www.vetcentre.bayer.co.uk
career.bayer.cn
www.career.bayer.cn
career.bayer.ch
www.career.bayer.ch
career.bayer.bg
www.career.bayer.bg
career.bayer.be
www.career.bayer.be
career.bayer.com
career.nordic.bayer.com
cdntest1.bayer.com
cdntest2.bayer.com
cdntest3.bayer.com
cms.identitynet.bayer.com
cropscience.bayer.com
hello.bayer.com
innovate.bayer.com
live.video-streaming.bayer.com
netstore.video-streaming.bayer.com
p4u.bayer.com
s1.bayer.com
s2.bayer.com
secure.bayer.com
shared.bayer.com
video-streaming.bayer.com
www.career.bayer.com
www.career.nordic.bayer.com
www.cropscience.bayer.com
www.hello.bayer.com
www.innovate.bayer.com
www.patients.bayer.com
www.tv-footage.bayer.com
www.webguide.bayer.com
sanssl1.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for sanssl1.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/jjZ/PR4pP0Qni0fG2C
mtsLvQQBAqeYy7XsLxKIlPMHL3ZLXAhN11hznePpPtYz2NEl9x+Z4oSOuVwX+tq4
WreEm83GGarnEhjNN8xGXPTURFaSikKwAjxxDlEpbj7Bdv34xNH/cv3wF5gskFO7
YlUUoFirCBe3WqTx5dv35Bf0FNa9ddDZSWsJaAcLMua3BSHMZFw8aEKtsjq0M6Jq
Tlnx5rOzLsmIeH4SoAd4RUDusGOn5axfQcNFeA/EPO7JKEQzquiW30C6uFxX3YCB
72zoCY63VwkD7Oc7we8bLsuO2C5zNG1DK+mfx3yjdqZzsfgrKzwVFA98A0QbgNje
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125996399964776356328508499007387891021
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayer Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sanssl1.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22719387986351280295346924556330496696267349845696198440143274450275732716965560884809568539609289996326295234799375970917423484879109349186426935652300682245927059583413666480525765849382356707807367109469257110057588388789837526723180599084774950910462883833988556985664597134493154830384520493862684673918015860672025042351960298277937946111927565969769291216546367978350374749962513747857000283662950820960893342464821235258670643043465140152659218513687708771116834788702333907097584315599094863941951086110376771955049641131772008313847654713592216078225563381599856744330252639650237436853306031552105968885387
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2171 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.your-life.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xarelto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.suspendpolyzone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mytempridstory.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxforceroachsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxforceonamission.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxforceimpact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.maxforceantsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glufosinate-ammonium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintstonesvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drscholls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ppmlogin.backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vmlogin.backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.backedbybayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinnovation.bayer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'omr.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iamproheart.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.bayeradvanced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.bayeradvanced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayeradvanced.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.crop.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.identitynet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'live.video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstore.video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cropscience.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.patients.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tv-footage.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webguide.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanssl1.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000156a3031e750000040300473045022100aa0b3f2b294818dc4966ff892104ccdaf94787b29aaac1cc92c26e93cb44efba022049b44da8c225fb9cafcfb7dc29f71ed32ea5d5e0eb42658b6c211fb9b00d2617007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000156a3031f9b0000040300473045022009b102baea5f7eea8f52d66717ebc1f2f3db333ccc4524100a0131ddf31159c602210098afd8da091fe9d0f62969f79d6afdd57e698686e4593ca457e5c0740d3b422700760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000156a3031fa8000004030047304502203101d3a349f08166e08a32b85013281bcf4ca2be728a8e71056d129fac4013930221009a4e1ab0097204b71bff26a616e74eba8765784efecbae8081bcb5f782fc52a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00d82564e75c80cc1596ea581a40d867eccd8ce9862fdc5b6ced9d893c05fd782698cd39fb7a891948f790c8c531bdf19249f8df4a9601c93a2828fc1bc00e3684d00e0cfe86e88b763e1fb7da20a62f4b5407d0b8a75a92a9e48a3f3dd361539f72f097090d286f11436f5c97e77bc4305070698548f06613987072631e2cd52b322cdfbd15d81bc10af3a2128818db01da4c385b4ef14c3480d42cac56e66dd0cb88f47795975aad613edf6ece26e1c3e883edc1d2969cce367f103fb83d980891d78da14b8edded9666c0bbc2758ef02afc55e25d35637f0fbe6199b03212038abc293f7fba736eb3b10075e58d94bcf3f320d6f2bb1f5aa4dd4c11023bee63