www.antikoncepce.cz

- Bayer AG -

Issued by Trusted Secure Certificate Authority 5

About this certificate

This digital certificate with serial number 35:00:20:5b:43:24:1a:92:07:69:b1:1b:3f:1c:8b:0d was issued on by Corporation Service Company.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayer AG

Organization: Bayer AG
Organization unit: Bayer Business Services GmbH
Organization unit: Unified Communications
Address: Kaiser-Wilhelm-Allee 1
Postal code: 51306
State / Province: NRW
Locality: Leverkusen
Country: DE

Corporation Service Company

Organization: Corporation Service Company
State / Province: DE
Locality: Wilmington
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:00:20:5b:43:24:1a:92:07:69:b1:1b:3f:1c:8b:0d
Serial Number (int): 70449740044249789378233649908019923725
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: dc:32:e6:92:81:fd:ce:89:2c:27:d1:55:42:c4:ae:91:c1:ec:02:6b
AuthorityKeyId: f2:bb:55:ee:fc:8f:cf:d0:3f:14:68:1a:95:7e:79:0e:ab:17:30:f4

Fingerprint (sha1): 13:30:98:ed:29:ef:d5:35:55:3f:60:22:0d:ed:5e:e0:d5:4f:aa:19
Fingerprint (sha256): d1:17:d6:83:65:c4:62:43:44:42:5c:95:98:21:bb:b0:67:af:34:db:04:af:51:06:24:80:1e:91:2d:e0:f7:65

Issuing Certificate URL: http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl

Check the revocation status for certificate www.antikoncepce.cz

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.antikoncepce.cz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.antikoncepce.cz
hcp.jivi.com
patientassistance.bayer.us
recipe.bayer.co.jp
shop.bayer.ch
wcp.fosrenol.bayer.jp
www.elevit.rs
www.focusonretina.it
www.integrityinresearch.ca
www.medvoice.it
www.nowapproved.vitrakvi.com
www.stivarga-publications.com
www.visionacademy.com
www.visionacademy.org

Other certificates including the domain name antikoncepce.cz

(limited to 100 certificates)
www.antikoncepce.cz
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl22.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.career.bayer.pt
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
sanssl12.bayer.com
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
sanssl12.bayer.com
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
www.antikoncepce.cz
antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
sanssl12.bayer.com
www.antikoncepce.cz
sanssl12.bayer.com

Certificate

The complete raw certificate details for www.antikoncepce.cz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIIXDCCB0SgAwIBAgIQNQAgW0MkGpIHabEbPxyLDTANBgkqhkiG9w0BAQsFADCB
hjELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkRFMRMwEQYDVQQHEwpXaWxtaW5ndG9u
MSQwIgYDVQQKExtDb3Jwb3JhdGlvbiBTZXJ2aWNlIENvbXBhbnkxLzAtBgNVBAMT
JlRydXN0ZWQgU2VjdXJlIENlcnRpZmljYXRlIEF1dGhvcml0eSA1MB4XDTE4MDcw
MjAwMDAwMFoXDTIwMDYyNDIzNTk1OVowgdoxCzAJBgNVBAYTAkRFMQ4wDAYDVQQR
EwU1MTMwNjEMMAoGA1UECBMDTlJXMRMwEQYDVQQHEwpMZXZlcmt1c2VuMR8wHQYD
VQQJExZLYWlzZXItV2lsaGVsbS1BbGxlZSAxMREwDwYDVQQKEwhCYXllciBBRzEl
MCMGA1UECxMcQmF5ZXIgQnVzaW5lc3MgU2VydmljZXMgR21iSDEfMB0GA1UECxMW
VW5pZmllZCBDb21tdW5pY2F0aW9uczEcMBoGA1UEAxMTd3d3LmFudGlrb25jZXBj
ZS5jejCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMM0gTToLhuBCBor
YkuBnnonQBkDLCuvoWMWDln5el/ziXbCpaLmKhA8/NU/nS7ISJwwZ4ZIpCXwC3u8
GCTO4ttRoh8qCnjOcIq4pawHS4RxbXuUw8ApMZ74zx2aYFxvR2C2mbrxpnnX0drQ
XdTYn5BDHfV23saRg5LMp7DiydmwEk6uA7A4emTfhUW7ul+p/CnGsfkCXIeGZBjn
abORiLR0q1S+yFRQk/xDXrKwhL9QPAeEeJq2SXeQ1YbejLvEdweUjwKvWuVVo2Us
Lh0gRybIA7Qsx1HXpGcM7XzbS2CFSSgohcDNt+BNkG10YeecgZilyW+7fgn9NUGT
s+ZrKsMCAwEAAaOCBG4wggRqMB8GA1UdIwQYMBaAFPK7Ve78j8/QPxRoGpV+eQ6r
FzD0MB0GA1UdDgQWBBTcMuaSgf3OiSwn0VVCxK6RwewCazAOBgNVHQ8BAf8EBAMC
BaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
SwYDVR0gBEQwQjA2BgsrBgEEAbIxAQICCDAnMCUGCCsGAQUFBwIBFhlodHRwczov
L2Nwcy51c2VydHJ1c3QuY29tMAgGBmeBDAECAjBQBgNVHR8ESTBHMEWgQ6BBhj9o
dHRwOi8vY3JsLnVzZXJ0cnVzdC5jb20vVHJ1c3RlZFNlY3VyZUNlcnRpZmljYXRl
QXV0aG9yaXR5NS5jcmwwgYIGCCsGAQUFBwEBBHYwdDBLBggrBgEFBQcwAoY/aHR0
cDovL2NydC51c2VydHJ1c3QuY29tL1RydXN0ZWRTZWN1cmVDZXJ0aWZpY2F0ZUF1
dGhvcml0eTUuY3J0MCUGCCsGAQUFBzABhhlodHRwOi8vb2NzcC51c2VydHJ1c3Qu
Y29tMIIBQwYDVR0RBIIBOjCCATaCE3d3dy5hbnRpa29uY2VwY2UuY3qCDGhjcC5q
aXZpLmNvbYIacGF0aWVudGFzc2lzdGFuY2UuYmF5ZXIudXOCEnJlY2lwZS5iYXll
ci5jby5qcIINc2hvcC5iYXllci5jaIIVd2NwLmZvc3Jlbm9sLmJheWVyLmpwgg13
d3cuZWxldml0LnJzghR3d3cuZm9jdXNvbnJldGluYS5pdIIad3d3LmludGVncml0
eWlucmVzZWFyY2guY2GCD3d3dy5tZWR2b2ljZS5pdIIcd3d3Lm5vd2FwcHJvdmVk
LnZpdHJha3ZpLmNvbYIdd3d3LnN0aXZhcmdhLXB1YmxpY2F0aW9ucy5jb22CFXd3
dy52aXNpb25hY2FkZW15LmNvbYIVd3d3LnZpc2lvbmFjYWRlbXkub3JnMIIBfgYK
KwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMA
xHuJeqj9ywAAAWRaXbBpAAAEAwBHMEUCIDzifWH+ZKCkLsrTbM3mgOg25sggfnt7
SjChBHZK5Uw8AiEAzUJ2blTzOiBJICeZOayvTYZD+eUbI51k+obSZP29kCoAdwBe
p3P531bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAWRaXbCvAAAEAwBIMEYC
IQCCChNdvYye4ZnY+sT57jFtXe9BNyHHx++e0sdUwWrXcwIhAJ6nsvr4KbysxbRb
ZhqJjV3e6XVjSlpA5H7kWxzoT2nTAHUAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgX
L6OqHQcT0wwAAAFkWl2wiQAABAMARjBEAiBVYISz8BepsJdpx2PpJPUdf7/M674t
1BlmulMEjZLYJAIgaA0J6d/FT+EePeecXeWa6CrVU2uqJwC2m5ksULwfDQEwDQYJ
KoZIhvcNAQELBQADggEBAEnJlxg0ppMF59CNg0HYjrlfjp8VppKD0mVtyIqiguy5
Ics2E12V/nUEP2Ru0tQS8O52NA4V+r3HfH3i+frV2MqaVoUY0vZwYYbmNkzitoKx
7iGf4eLVh4R0nfKoFynyNEsbWID5lKT76HDa9FSNr6wZoXM8HXlO3rw7l5J+9MDO
BXtzJbn45FJUgiUt4hNOiZXxAaE/1u7VXhNC0Tt1O3wKr9Q8Apa6nYx+t1dmi2CT
rS+VVb2B8Jj29Zm0Z1yTOf9IYaq1GA7TrF8iDARw1LCGftfnh0mjrNkMKgsdUX9E
XMFX3CugtXWakqb51to3wXbul9htDlA5p7tCOH5jNKU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzSBNOguG4EIGitiS4Ge
eidAGQMsK6+hYxYOWfl6X/OJdsKlouYqEDz81T+dLshInDBnhkikJfALe7wYJM7i
21GiHyoKeM5wirilrAdLhHFte5TDwCkxnvjPHZpgXG9HYLaZuvGmedfR2tBd1Nif
kEMd9XbexpGDksynsOLJ2bASTq4DsDh6ZN+FRbu6X6n8Kcax+QJch4ZkGOdps5GI
tHSrVL7IVFCT/ENesrCEv1A8B4R4mrZJd5DVht6Mu8R3B5SPAq9a5VWjZSwuHSBH
JsgDtCzHUdekZwztfNtLYIVJKCiFwM234E2QbXRh55yBmKXJb7t+Cf01QZOz5msq
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70449740044249789378233649908019923725
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wilmington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporation Service Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trusted Secure Certificate Authority 5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '51306'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NRW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Leverkusen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kaiser-Wilhelm-Allee 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Business Services GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Unified Communications'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.antikoncepce.cz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24642360507603232356251143178583616871423241787267566823930782526389127256737249292118896462646101149290611813699980469928350091223841301615214579794575585018819103181613361078252198476922310305678261468931836679760014138744333261614165285753486263079775999062992698119679832866960559715567046444432799963545894666497681507396175847244348572902780419366052651868686550032196171993938987517115586132701991184694706504737549985606741767740583555785385603522848395944096703291805467804407027306396388686781343056936322617438461986732847896451971001131815807025576255644043221120697661762730587705248321076594318567484099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f2bb55eefc8fcfd03f14681a957e790eab1730f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc32e69281fdce892c27d15542c4ae91c1ec026b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.8
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TrustedSecureCertificateAuthority5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TrustedSecureCertificateAuthority5.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (314 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antikoncepce.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcp.jivi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patientassistance.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recipe.bayer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcp.fosrenol.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.rs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.focusonretina.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.integrityinresearch.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medvoice.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nowapproved.vitrakvi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stivarga-publications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visionacademy.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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