bnp11b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:f6:2f:5f:87:69:5e:bd:6e:cc:a2:e5:8b:33:bb:34 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f6:2f:5f:87:69:5e:bd:6e:cc:a2:e5:8b:33:bb:34
Serial Number (int): 21216685805807977107606680273811651380
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 14:20:3a:97:42:6b:62:d6:0c:77:2b:65:15:b3:31:ea:0f:ff:c8:04
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 5e:6f:b0:f9:9d:29:74:5e:81:fd:fd:e3:d8:5c:94:c6:bc:78:a6:1a
Fingerprint (sha256): 00:5f:56:bf:e2:e9:16:bf:9d:37:5e:92:94:60:ef:e6:9e:33:87:35:d7:21:ab:1e:5f:df:50:28:f3:1a:68:f0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp11b.bnpparibas.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp11b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp11b.bnpparibas.com
www.reim.bnpparibas.co.uk
www.realestate.bnpparibas.pl
www.realestate.bnpparibas.nl
www.realestate.bnpparibas.lu
www.realestate.bnpparibas.ie
www.realestate.bnpparibas.hu
www.realestate.bnpparibas.cz
www.realestate.bnpparibas.com.ro
www.realestate.bnpparibas.com
www.realestate.bnpparibas.co.uk
www.icare-service.net
www.espace.reim.bnpparibas.fr
www.edc.bnpparibascardif.com
www.cardifeldjazair.dz
www.cardif.no
www.cardif.dk
www.bnppre.ro
www.bnppre.pl
www.bnppre.nl
www.bnppre.lu
www.bnppre.ie
www.bnppre.hu
www.bnppre.cz
www.bnppre.com
www.bnppre.co.uk
www.bnpparibascardif.sk
www.bnpparibascardif.se
www.bnpparibascardif.ro
www.bnpparibascardif.pt
www.bnpparibascardif.no
www.bnpparibascardif.hu
www.bnpparibascardif.es
www.bnpparibascardif.dk
www.bnpparibascardif.cz
www.bnpparibascardif.bg
www.bnpparibascardif.at
www.assurance-epargne-pension.fr
scpi.realestate.bnpparibas.fr
scpi.bnpparibas.com
reim.bnpparibas.co.uk
realestate.bnpparibas.pl
realestate.bnpparibas.nl
realestate.bnpparibas.lu
realestate.bnpparibas.ie
realestate.bnpparibas.hu
realestate.bnpparibas.cz
realestate.bnpparibas.com.ro
realestate.bnpparibas.com
realestate.bnpparibas.co.uk
m.realestate.bnpparibas.pl
m.realestate.bnpparibas.nl
m.realestate.bnpparibas.lu
m.realestate.bnpparibas.ie
m.realestate.bnpparibas.hu
m.realestate.bnpparibas.cz
m.realestate.bnpparibas.com.ro
m.realestate.bnpparibas.com
m.realestate.bnpparibas.co.uk
inquiro-trade-demo.staging.bnpparibas.com
inquiro-qual.staging.bnpparibas.com
inquiro-preprod.bnpparibas.com
icare-service.net
espace.reim.bnpparibas.fr
edc.bnpparibascardif.com
cardifeldjazair.dz
cardif.no
cardif.dk
bnppre.ro
bnppre.pl
bnppre.nl
bnppre.lu
bnppre.ie
bnppre.hu
bnppre.cz
bnppre.com
bnppre.co.uk
bnpparibascardif.sk
bnpparibascardif.se
bnpparibascardif.ro
bnpparibascardif.pt
bnpparibascardif.no
bnpparibascardif.hu
bnpparibascardif.es
bnpparibascardif.dk
bnpparibascardif.cz
bnpparibascardif.bg
bnpparibascardif.at
atisreal.ie
atisreal.com
assurance-epargne-pension.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp11b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOIjCCDQqgAwIBAgIQD/YvX4dpXr1uzKLlizO7NDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA4MDEwMDAwMDBa
Fw0yMzA4MDIyMzU5NTlaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUg
RnJhbmNlMRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFT
IFNBMR4wHAYDVQQDExVibnAxMWIuYm5wcGFyaWJhcy5jb20wWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAASif9cYyRSWHMRLU9cLWKX7DmKSDxKHRry3/Eon2PhIRAVe
1/RoOGmM8/HrFC8YXa2RaL5xk474oDfufeby2++Ro4ILoDCCC5wwHwYDVR0jBBgw
FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFBQgOpdCa2LWDHcrZRWz
MeoP/8gEMIIISQYDVR0RBIIIQDCCCDyCFWJucDExYi5ibnBwYXJpYmFzLmNvbYIZ
d3d3LnJlaW0uYm5wcGFyaWJhcy5jby51a4Icd3d3LnJlYWxlc3RhdGUuYm5wcGFy
aWJhcy5wbIIcd3d3LnJlYWxlc3RhdGUuYm5wcGFyaWJhcy5ubIIcd3d3LnJlYWxl
c3RhdGUuYm5wcGFyaWJhcy5sdYIcd3d3LnJlYWxlc3RhdGUuYm5wcGFyaWJhcy5p
ZYIcd3d3LnJlYWxlc3RhdGUuYm5wcGFyaWJhcy5odYIcd3d3LnJlYWxlc3RhdGUu
Ym5wcGFyaWJhcy5jeoIgd3d3LnJlYWxlc3RhdGUuYm5wcGFyaWJhcy5jb20ucm+C
HXd3dy5yZWFsZXN0YXRlLmJucHBhcmliYXMuY29tgh93d3cucmVhbGVzdGF0ZS5i
bnBwYXJpYmFzLmNvLnVrghV3d3cuaWNhcmUtc2VydmljZS5uZXSCHXd3dy5lc3Bh
Y2UucmVpbS5ibnBwYXJpYmFzLmZyghx3d3cuZWRjLmJucHBhcmliYXNjYXJkaWYu
Y29tghZ3d3cuY2FyZGlmZWxkamF6YWlyLmR6gg13d3cuY2FyZGlmLm5vgg13d3cu
Y2FyZGlmLmRrgg13d3cuYm5wcHJlLnJvgg13d3cuYm5wcHJlLnBsgg13d3cuYm5w
cHJlLm5sgg13d3cuYm5wcHJlLmx1gg13d3cuYm5wcHJlLmllgg13d3cuYm5wcHJl
Lmh1gg13d3cuYm5wcHJlLmN6gg53d3cuYm5wcHJlLmNvbYIQd3d3LmJucHByZS5j
by51a4IXd3d3LmJucHBhcmliYXNjYXJkaWYuc2uCF3d3dy5ibnBwYXJpYmFzY2Fy
ZGlmLnNlghd3d3cuYm5wcGFyaWJhc2NhcmRpZi5yb4IXd3d3LmJucHBhcmliYXNj
YXJkaWYucHSCF3d3dy5ibnBwYXJpYmFzY2FyZGlmLm5vghd3d3cuYm5wcGFyaWJh
c2NhcmRpZi5odYIXd3d3LmJucHBhcmliYXNjYXJkaWYuZXOCF3d3dy5ibnBwYXJp
YmFzY2FyZGlmLmRrghd3d3cuYm5wcGFyaWJhc2NhcmRpZi5jeoIXd3d3LmJucHBh
cmliYXNjYXJkaWYuYmeCF3d3dy5ibnBwYXJpYmFzY2FyZGlmLmF0giB3d3cuYXNz
dXJhbmNlLWVwYXJnbmUtcGVuc2lvbi5mcoIdc2NwaS5yZWFsZXN0YXRlLmJucHBh
cmliYXMuZnKCE3NjcGkuYm5wcGFyaWJhcy5jb22CFXJlaW0uYm5wcGFyaWJhcy5j
by51a4IYcmVhbGVzdGF0ZS5ibnBwYXJpYmFzLnBsghhyZWFsZXN0YXRlLmJucHBh
cmliYXMubmyCGHJlYWxlc3RhdGUuYm5wcGFyaWJhcy5sdYIYcmVhbGVzdGF0ZS5i
bnBwYXJpYmFzLmllghhyZWFsZXN0YXRlLmJucHBhcmliYXMuaHWCGHJlYWxlc3Rh
dGUuYm5wcGFyaWJhcy5jeoIccmVhbGVzdGF0ZS5ibnBwYXJpYmFzLmNvbS5yb4IZ
cmVhbGVzdGF0ZS5ibnBwYXJpYmFzLmNvbYIbcmVhbGVzdGF0ZS5ibnBwYXJpYmFz
LmNvLnVrghptLnJlYWxlc3RhdGUuYm5wcGFyaWJhcy5wbIIabS5yZWFsZXN0YXRl
LmJucHBhcmliYXMubmyCGm0ucmVhbGVzdGF0ZS5ibnBwYXJpYmFzLmx1ghptLnJl
YWxlc3RhdGUuYm5wcGFyaWJhcy5pZYIabS5yZWFsZXN0YXRlLmJucHBhcmliYXMu
aHWCGm0ucmVhbGVzdGF0ZS5ibnBwYXJpYmFzLmN6gh5tLnJlYWxlc3RhdGUuYm5w
cGFyaWJhcy5jb20ucm+CG20ucmVhbGVzdGF0ZS5ibnBwYXJpYmFzLmNvbYIdbS5y
ZWFsZXN0YXRlLmJucHBhcmliYXMuY28udWuCKWlucXVpcm8tdHJhZGUtZGVtby5z
dGFnaW5nLmJucHBhcmliYXMuY29tgiNpbnF1aXJvLXF1YWwuc3RhZ2luZy5ibnBw
YXJpYmFzLmNvbYIeaW5xdWlyby1wcmVwcm9kLmJucHBhcmliYXMuY29tghFpY2Fy
ZS1zZXJ2aWNlLm5ldIIZZXNwYWNlLnJlaW0uYm5wcGFyaWJhcy5mcoIYZWRjLmJu
cHBhcmliYXNjYXJkaWYuY29tghJjYXJkaWZlbGRqYXphaXIuZHqCCWNhcmRpZi5u
b4IJY2FyZGlmLmRrgglibnBwcmUucm+CCWJucHByZS5wbIIJYm5wcHJlLm5sggli
bnBwcmUubHWCCWJucHByZS5pZYIJYm5wcHJlLmh1gglibnBwcmUuY3qCCmJucHBy
ZS5jb22CDGJucHByZS5jby51a4ITYm5wcGFyaWJhc2NhcmRpZi5za4ITYm5wcGFy
aWJhc2NhcmRpZi5zZYITYm5wcGFyaWJhc2NhcmRpZi5yb4ITYm5wcGFyaWJhc2Nh
cmRpZi5wdIITYm5wcGFyaWJhc2NhcmRpZi5ub4ITYm5wcGFyaWJhc2NhcmRpZi5o
dYITYm5wcGFyaWJhc2NhcmRpZi5lc4ITYm5wcGFyaWJhc2NhcmRpZi5ka4ITYm5w
cGFyaWJhc2NhcmRpZi5jeoITYm5wcGFyaWJhc2NhcmRpZi5iZ4ITYm5wcGFyaWJh
c2NhcmRpZi5hdIILYXRpc3JlYWwuaWWCDGF0aXNyZWFsLmNvbYIcYXNzdXJhbmNl
LWVwYXJnbmUtcGVuc2lvbi5mcjAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9j
cmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5j
cmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT
QVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggr
BgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEB
BHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsG
AQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNS
U0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQC
BIIBbgSCAWoBaAB3AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAAB
gla9IZ4AAAQDAEgwRgIhAMiY/T3oKR0ReeaR5Xj82HiaM0GGQhycC/1PPwcNmsqG
AiEA9KaUVRwW2/2EQsQAdfi6BtowwX5LRKZdrWaBFiYgoagAdQA1zxkbv7FsV78P
rUxtQsu7ticgJlHqP+Eq76gDwzvWTAAAAYJWvSG0AAAEAwBGMEQCIEAXUN2ycTNN
oQ3q93ACyAphfV5JlmhW34zToRGoS028AiAV/JkZOHAQOw842ypw4exjXzVWPonZ
gc80F/19HARWBAB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81xJ4dCYEl7bSZAAAB
gla9IccAAAQDAEcwRQIgdQmVGtBQsK6TOru1R2wodxov4J7mu02qsBqlLtcwNZgC
IQDIREx9eRdNbBPQo90xJpX9vUvTSAiM6vCV7kYJrnmP2zANBgkqhkiG9w0BAQsF
AAOCAQEAHAckwViQkpDjYM0mFMx0XNa2NuvdfQWZOyN3vOrOSIdsgmSkkSDYHtmb
judc7tSIvl4WTmizAwCVIynIIirb0DaYf03dDR4Zx52wcs6hdqovCbPGzwpF0LMk
tVsBZd4lVNruVJ9EnKkKwROucQEMzBFFL/LyRouVc+I7XvK3By+xgpezI1MP+xp6
JkMv079paYvJAsjbLtiyu1j1TVXWmY81DpZflR1yvf5Hk7ee1mkywVL0TPyGSrle
k7wJvGWjEol4mp4XN0mGH3DWal3R/Nrt1EZpCFq8zp+15F2f+uUD9FO+ePmUxZ3W
qmhw3XqK99Z59fLbNvA+kIzt4eFsng==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEon/XGMkUlhzES1PXC1il+w5ikg8S
h0a8t/xKJ9j4SEQFXtf0aDhpjPPx6xQvGF2tkWi+cZOO+KA37n3m8tvvkQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21216685805807977107606680273811651380
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp11b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004a27fd718c914961cc44b53d70b58a5fb0e62920f128746bcb7fc4a27d8f84844055ed7f46838698cf3f1eb142f185dad9168be71938ef8a037ee7de6f2dbef91
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							14203a97426b62d60c772b6515b331ea0fffc804
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp11b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realestate.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.icare-service.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace.reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifeldjazair.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-epargne-pension.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.realestate.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'realestate.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.com.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.realestate.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-demo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-qual.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icare-service.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace.reim.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifeldjazair.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppre.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-epargne-pension.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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