sanssl1.bayer.com

- Bayer Corporation -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 48:a9:0f:50:c7:a2:43:e3:ba:03:ef:39:ea:d3:c7:be was issued on by GeoTrust Inc..

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayer Corporation

Organization: Bayer Corporation
Organization unit: IT
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:a9:0f:50:c7:a2:43:e3:ba:03:ef:39:ea:d3:c7:be
Serial Number (int): 96582224501787068171093444460956338110
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): a2:6a:f0:96:ba:22:5c:00:e7:cc:1e:52:4e:c7:43:9c:54:bb:6a:34
Fingerprint (sha256): ee:93:f7:e8:64:4e:b7:38:32:30:a5:61:4c:fe:33:fa:76:43:da:b3:62:18:6c:e9:24:a7:97:77:ed:d2:45:a5

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate sanssl1.bayer.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sanssl1.bayer.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

openinnovation.bayer.co.jp
career.bayer.com.tr
www.bayerbbs.com
career.bayer.ro
www.career.bayer.ro
career.bayer.tw
www.thrombosisadvisor.com
career.bayer.com.au
www.xarelto.jp
www.bayerbbs.de
career.bayer.nl
www.career.bayer.nl
career.bayer.in
www.career.bayer.in
vetcentre.bayer.co.uk
www.career.bayer.co.uk
career.bayer.co.uk
www.vetcentre.bayer.co.uk
www.drscholls.com
career.bayer.cn
www.career.bayer.cn
www.thrombosisadviser.com
www.glufosinate-ammonium.com
www.career.bayer.jp
career.bayer.jp
career.bayer.pl
www.bayer-ah.jp
www.flintstonesvitamins.com
www.eylea.jp
www.career.bayer.ua
career.bayer.ua
www.claritin.com
career.bayer.ru
career.bayer.pk
www.petbasics.com
www.career.bayer.es
career.bayer.es
career.bayer.ca
career.bayer.be
www.career.bayer.be
career.bayer.ch
www.career.bayer.ch
www.career.bayer.com.mx
career.bayer.com.mx
career.bayer.us
www.career.bayer.us
www.career.bayer.it
career.bayer.it
career.bayer.at
www.career.bayer.bg
career.bayer.bg
www.carreiras.bayer.com.br
carreiras.bayer.com.br
www.elevit.com.cn
elevit.com.cn
www.career.bayer.fr
career.bayer.fr
business-services.bayer.de
career.bayer.de
www.wohnungsboerse.bayer.de
research.app.bayer.de
www.karriere.bayer.de
www.career.bayer.de
magazin.app.bayer.de
www.business-services.bayer.de
karriere.bayer.de
business-services.bayer.com
career.bayer.com
www.career.bayer.com
s2.bayer.com
career.andean.bayer.com
secure.bayer.com
cdntest3.bayer.com
netstore.video-streaming.bayer.com
cdntest1.bayer.com
www.business-services.bayer.com
video-streaming.bayer.com
career.southernafrica.bayer.com
www.innovate.bayer.com
research.app.bayer.com
innovate.bayer.com
s3.bayer.com
career.maghreb.bayer.com
p4u.bayer.com
s1.bayer.com
www.tv-footage.bayer.com
career.nordic.bayer.com
career.middleeast.bayer.com
magazine.app.bayer.com
cms.identitynet.bayer.com
www.career.nordic.bayer.com
cdntest2.bayer.com
www.hello.bayer.com
shared.bayer.com
hello.bayer.com
career.see.bayer.com
www.webguide.bayer.com
sanssl1.bayer.com

Other certificates including the domain name bayer.com

(limited to 100 certificates)
*.loyalty-uat.awsapac.bayer.com
sanssl15.bayer.com
sanssl11.bayer.com
cropscience.bayer.gr
*.conosur-row-crops-portal.int.bayer.com
*.fargate.153847173324.cloud.bayer.com
jobs.bayer.com
investor.bayer.com
mdmwebservice.cropscience.bayer.com
static.bayer.com
iqms.int.bayer.com
www.aspirin.bayer.com
dev1.esales-dev.int.bayer.com
www.bayer.com
cheers4peers-uat.int.bayer.com
development.id.bayer.com
pft.bayercropscience.us
edit-admin.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ar-experience.bayer.com
legaplus.bayer.de
sanssl3.bayer.com
www.midol.com
cdn.roi5.747385846639.cloud.bayer.com
*.sandbox.shinyrama.d360.cloud.bayer.com
auth.pbeat04006578-dev-ea7e-calanti.on-gcloud.bayer.com
poc.ftp-na.bayer.com
gitlab-gateway-dev.servicenowapi.cloud.bayer.com
diyabetnedir.bayer.com
www.midol.com
www.aspirin.me
cime.int.bayer.com
*.lunchandlearn-qa.bayer.com
*.eightfold.ai
hcp.bayer.com
cropscience.bayer.gr
qa.macs.knowledge-suite.int.bayer.com
www.cteph.com
sanssl15.bayer.com
*.deepmind.int.bayer.com
www.antikoncepce.cz
mymail.bayer.com
www.antikoncepce.cz
es.bayer.be
bayer.com
alb.dev1.esales-dev.int.bayer.com
*.fargate.219632094236.cloud.bayer.com
www.cteph.com
*.bravo.926611122902.cloud.bayer.com
bayernet-poccm.int.bayer.com
conosfnet.bayer.com
farmer-quiz.bayer.com
baytraining.bayer.com
healthpolicy.pharma.bayer.com
resources.animalhealth.bayer.com
billie.int.bayer.com
www.iberogast.es
nas-latest-1.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
dev-validatedr.int.bayer.com
development.moodlerooms.com
view.mail.consumerhealth.bayer.com
click.mail.bayer.com
www.seresto.se
sanssl7.bayer.com
*.labware8.435341552525.cloud.bayer.com
radiology.bayer.com
www.vectorcontrol.bayer.com
sanssl24.bayer.com
www.saudi-arabia.cropscience.bayer.com
*.safetrack.bayer.com
community.bayer.com
xarelto.com
bip-foodindustry.bayer.com
dev1.esales-dev.int.bayer.com
www.myfinacea.com
career.bayer.com
www.kogenate.ca
radiology-archive.bayer.com
forms.bayer.com
ps-mt-ui.473416480675.cloud.bayer.com
san-9-s50.tlsprovisioning.exacttarget.com
ssh-user1-sp18.pj7523-rdl-workbench-dev.on-gcloud.bayer.com
ex.alliance.bayer.com
*.delta.358985726119.cloud.bayer.com
val.dinos.int.bayer.com
*.fargate-infra-test.582886667106.cloud.bayer.com
varietyselect.bayer.com
image.email.opcomobilites.fr
bicanada.bayer.com
extsipsgpp.bayer.com
mytransfer-pgh.bayer.com
www.tucuenta.bayer.com
magazine.bayer.com
datapond-dev.473416480675.cloud.bayer.com
healthcare.basel.bayer.com
*.fargate.602258435465.cloud.bayer.com
www.ccresponsecenter.bayer.com
bayerpharma.de
qa.bdas-app.871367688496.cloud.bayer.com
*.fargate.689555805548.cloud.bayer.com
bcon-dev.bayer.com

Certificate

The complete raw certificate details for sanssl1.bayer.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mbXY5mQiRrDMnPALQ6q
J0UXSbNZpdFwrr/aTAh4AuYubJ02E72HZWJIK9QX2pBsj8yqHaihLpDPUTPmrubQ
TGUbGWLVO8hA5guzxgqZi4iqC8JAQeOxxBdmclj+NEr5qeWjJrR+Ul8MyK+S9RIp
WLP9666tkr474KEm8Z6eA1tkdc4ZbJFKUBs1G3Cv4ewez9MNsoReoqCh+kd/8V98
9y8BTzkHEmyWYCFjugqZiVq/ejNbCqbVPd4h705P263DJjLG1qwU9iJnqORZ2O79
vL5YtxoEBGOVMQthuyS6UP9xfqUJwo5mfw524aqnMbjXJzs9lBAec3/RFwMfGxpg
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96582224501787068171093444460956338110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Bayer Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'sanssl1.bayer.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28580569888780721820906761387871782164978415397660543756321444377612480676181512094876685587921870799470919213545817437156601290411004617255333435124698533241646736368349722162230136945040702898941503386399307555429054920209916368918027529839173814724548417956885837089141385344360886024701878190269671216078909395176662433335430507704054036939355113571179069695908770674932940947383592298589207240441328963822725909420394313613610216043056621504765806420842636501248423993030550503106746898717142340295665237146723679717613368007508420668477500887861780489833016192816038548037145603504217424326057511914635261534287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2094 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openinnovation.bayer.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayerbbs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.xarelto.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayerbbs.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vetcentre.bayer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.drscholls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thrombosisadviser.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glufosinate-ammonium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer-ah.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flintstonesvitamins.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ua'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.pk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.petbasics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carreiras.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elevit.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-services.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wohnungsboerse.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.app.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazin.app.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business-services.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'karriere.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-services.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.andean.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netstore.video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.business-services.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-streaming.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.southernafrica.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.app.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'innovate.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's3.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.maghreb.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p4u.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's1.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tv-footage.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.middleeast.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magazine.app.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.identitynet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.career.nordic.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdntest2.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shared.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hello.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'career.see.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webguide.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sanssl1.bayer.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153cf7593300000040300463044022019bc3c7a024af045ba50ae35b4492976db7558a3fe4acec86b29ae05d37bab87022027548bbb0171dca2256b65ecd15cafe5551a87118327ef7da29d02c353559527007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153cf7593650000040300473045022100f9f4a782193a35fcbb73a0936e537883529a7b4bc594b12e16145e9a627060980220385adf28f86830b08d0c0fca5371471c039e7d212a108909da44660e50d1b718
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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