www.1095dias.mx

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:f4:5b:ea:03:1c:53:43:61:8f:c7:f8:7b:26:f2:8a:a9:d5 was issued on by Let's Encrypt.

With 94 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.1095dias.mx

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f4:5b:ea:03:1c:53:43:61:8f:c7:f8:7b:26:f2:8a:a9:d5
Serial Number (int): 344487930132162435594955766488206857120213
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 4d:2f:ef:15:2a:6b:5d:0b:7c:28:85:99:dc:35:a9:75:57:4f:af:49
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): e4:04:ef:e9:04:09:3d:d8:37:f0:35:c2:6a:e2:0e:46:41:73:e4:ed
Fingerprint (sha256): ff:5c:7b:79:4b:b1:9b:e1:f4:db:06:0e:f2:16:91:cf:67:f1:95:e9:47:ca:3c:97:43:4d:49:96:bb:5a:8c:79

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org/

Check the revocation status for certificate www.1095dias.mx

94

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.1095dias.mx

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

animalhealth.bayer.ca
berocca.com.pe
biotech.bayer.com
consent.bayer.ca
diabetes.ascensia.ie
diabetes.bayer.ie
fanpage.bepantol.com.br
idnet.bayer.com
mascotas.bayer.com.mx
programasuperar.bayer.com.br
www.1095dias.mx
www.actron.com.ar
www.adbabyhcp.com
www.adempas-us.com
www.aleve.com
www.aleveextrafuerte.com
www.alevehcp.com
www.alka-seltzer.com.mx
www.alkaseltzer.com
www.alkaseltzerbruluresdestomac.ca
www.alkaseltzerplus.com
www.alkaseltzerreliefchews.ca
www.aspirina-ca.com
www.aspirina100.com.co
www.atagius-us.com
www.audioaspirina.com.ec
www.bayer.com.br
www.bayeraspirinhcp.com
www.bayercarepro.com
www.bayerhealthcare.com.br
www.baykomm.bayer.com
www.baykomm.bayer.de
www.baylab.bayer.com
www.baylab.bayer.de
www.bbnovalac.mx
www.bepanthen.com.co
www.bepanthol.cl
www.berlex.com
www.beta-plus.com.ar
www.bhcextpartneraepctraining.com
www.buyberocca.com
www.canesten.ca
www.canesten.com.co
www.canestenv.com.mx
www.cardioaspirina-ca.com
www.chronostrials.com
www.citracal.com
www.citracalhcp.com
www.clarispray.com
www.claritin.ca
www.claritinespanol.com
www.clubdemascotas.com.co
www.colaborator.bayer.com
www.contournextpro.com
www.contourone.com
www.coppertone.com
www.coppertone.com.mx
www.cuidateya.mx
www.cuidomicorazon.com.pe
www.culture.bayer.com
www.demo.cteph.com
www.diabetes.ascensia.pl
www.diabetes.bayer.ie
www.elevit.jp
www.empecid.jp
www.essure.com
www.essuremedicalresources.com
www.eylea-publications.com
www.finaceafoam.com
www.glc-in.bayer.com
www.glc-in.bayer.de
www.hcp-samples.bayer.com
www.hptec.com.mx
www.kovaltry.com
www.kultur.bayer.de
www.livewell.bayer.com
www.livingwithhemophilia.com
www.mcrpceducation.bayer.com
www.me.diabetes.ascensia.com
www.natele-ca.com
www.nexavarbrandbook.com
www.pinnwand.bayer.de
www.prenatal-navi.jp
www.radiologysolutions.bayer.com
www.research.bayer.com
www.research.bayer.de
www.sanidadanimal.bayer.com.mx
www.saudeanimal.bayer.com.br
www.savingscard.bayer.com
www.stivarga.com
www.thetimelineproject.com
www.video-center.bayer.com
www.video-center.bayer.de
www.viviralogrande.com.mx

Other certificates including the domain name 1095dias.mx

(limited to 100 certificates)
idnet.bayer.com
www.1095dias.mx
www.1095dias.mx
www.1095dias.mx
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
idnet.bayer.com
www.1095dias.mx
www.1095dias.mx

Certificate

The complete raw certificate details for www.1095dias.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XvW2wWs0A3H5Q4OEHIO
mldNsoqbnIBLvWdhImiPaC6bpQTiiIVRErJb9cAysU4UovJZ+JFFhwip5HNrpXmV
Oqurqy9joBWZZ/EEFh3DrjhEW+91M7S215E1NAEp6KSx2DxMZhFNAmIBB4CmJVTn
OzmJ94TG/EH4Yzf1bAfAGigYfgaEd6b4V6faSu4t2tNmIpxFLTjEVpDIkWwvE0B4
7HOBnJ8DxkI/MDDbCYd38YO3aV4o5UkK8XjWx4c6b1m32bTBOJscdZ0WN8AdpOFU
3xlZwJVpnUIfOKInhQn+HB1rNW1fh87R6avNGZfuw6cLqK8Oe+079PPFNHgFfFau
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 344487930132162435594955766488206857120213
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-02-15 08:11:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-16 08:11:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.1095dias.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27959732822240936574846687644829423728625703940043653028658867719278016832263167517953984317775682317010570903752411669444872368410099756263617840474701052459832315685509114786139488689626590177697898138483069310264153074206640418080350045796784075631130492078605264704601705861520305474059039115280487721078061559032001063803994962715994173254076728351892481658786432080820414278965997912122058297860390483858611369089644893174099919648679944408656131648052354370523754620854087138657321355898359078048181902491707699729488953606140632755188631084236815603295644781274705892182661001789526476061677980516399770414813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d2fef152a6b5d0b7c288599dc35a975574faf49
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'animalhealth.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berocca.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biotech.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consent.bayer.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.ascensia.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diabetes.bayer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fanpage.bepantol.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idnet.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mascotas.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'programasuperar.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.1095dias.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.actron.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adbabyhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adempas-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleve.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aleveextrafuerte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alevehcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alka-seltzer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerbruluresdestomac.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerplus.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alkaseltzerreliefchews.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirina-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aspirina100.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atagius-us.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.audioaspirina.com.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayeraspirinhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayercarepro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bayerhealthcare.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baykomm.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baykomm.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylab.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.baylab.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bbnovalac.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthen.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bepanthol.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.berlex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.beta-plus.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bhcextpartneraepctraining.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.buyberocca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canesten.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.canestenv.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardioaspirina-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chronostrials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citracal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.citracalhcp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clarispray.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritin.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.claritinespanol.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubdemascotas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colaborator.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contournextpro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.contourone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppertone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coppertone.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuidateya.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cuidomicorazon.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.culture.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.cteph.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.ascensia.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.diabetes.bayer.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elevit.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.empecid.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.essuremedicalresources.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eylea-publications.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.finaceafoam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glc-in.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glc-in.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hcp-samples.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hptec.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kovaltry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kultur.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livewell.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingwithhemophilia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mcrpceducation.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.me.diabetes.ascensia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.natele-ca.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nexavarbrandbook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pinnwand.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.prenatal-navi.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.radiologysolutions.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.research.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sanidadanimal.bayer.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saudeanimal.bayer.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.savingscard.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stivarga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thetimelineproject.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video-center.bayer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.video-center.bayer.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viviralogrande.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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