dspp.bnpparibas.fr

- BNP PARIBAS -

Issued by VeriSign Class 3 Secure Server CA - G3

About this certificate

This digital certificate with serial number 1c:3e:5a:b7:3d:a2:41:a0:ed:e6:db:18:cc:d4:43:da was issued on by VeriSign, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS

Organization: BNP PARIBAS
Organization unit: IS
State / Province: PARIS
Locality: PARIS
Country: FR

VeriSign, Inc.

Organization: VeriSign, Inc.
Organization unit: VeriSign Trust Network
Organization unit: Terms of use at https://www.verisign.com/rpa (c)10
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:3e:5a:b7:3d:a2:41:a0:ed:e6:db:18:cc:d4:43:da
Serial Number (int): 37542146221899614019310110701595673562
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 0d:44:5c:16:53:44:c1:82:7e:1d:20:ab:25:f4:01:63:d8:be:79:a5

Fingerprint (sha1): b0:52:a7:46:23:31:34:62:ec:97:e5:99:0f:c1:48:ad:7b:cc:9d:f5
Fingerprint (sha256): 01:b3:e0:49:5c:cb:2d:9e:34:74:66:c3:c9:18:5e:a2:32:47:4b:38:61:2c:a0:5c:ac:d0:f6:5b:0a:84:d8:c4

Issuing Certificate URL: http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer

Revocation information

OCSP Server: http://ocsp.verisign.com
CRL Distribution Point: http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl

Check the revocation status for certificate dspp.bnpparibas.fr

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dspp.bnpparibas.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name bnpparibas.fr

(limited to 100 certificates)
bnp16b.bnpparibas.com
bnp11b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
extranetclients.repmfrance.bnpparibas.fr
iol-valuation-realestate.bnpparibas.fr
dspp.bnpparibas.fr
leaseoffers.leasingsolutions.bnpparibas.fr
bnp13b.bnpparibas.com
mail1.bnpparibas.fr
bnp03s.bnpparibas.com
extra-vendeur-realestate.staging.bnpparibas.fr
group.bnpparibas
leaseoffers.leasingsolutions.bnpparibas.fr
www.privalto.fr
carto.rentalsolutions.bnpparibas.fr
push.bnpparibas.com
bnp03s.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
www.realestate.bnpparibas.fr
bnp02b.bnpparibas.com
leaseoffersu.leasingsolutions.bnpparibas.fr
newlo.leasingsolutions.bnpparibas.fr
www.espace.reim.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp03s.bnpparibas.com
reim.bnpparibas.fr
easysurvey.realestate.bnpparibas.fr
extranet-vendeur-realestate.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
collect-bnl-test.bnpparibas.fr
collect.dcrm.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnppf-collect.staging.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
easy.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
investo.bnpparibas
leasingsolutions.bnpparibas.com
bnp13b.bnpparibas.com
bnp08b.bnpparibas.com
www.dspp.bnpparibas.fr
group.bnpparibas.com
bnp03b.bnpparibas.com
staging.international-buyers.bnpparibas.fr
3stepit.bnpparibas.fr
www.logement.bnpparibas.fr
gw2.leasingsolutions.bnpparibas.fr
leaseoffersu.leasingsolutions.bnpparibas.fr
bnp02b.bnpparibas.com
bnp03b.bnpparibas.com
bnp02b.bnpparibas.com
bnp03s.bnpparibas.com
mabanqueentreprise.bnpparibas
push.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp02b.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
hubselling.factor.bnpparibas.fr
international-buyers.bnpparibas.fr
dspp.bnpparibas.fr
bnp03s.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp06b.bnpparibas.com
leasingsolutions.bnpparibas.com
france-titrisationrec-was7.bnpparibas.fr
bnp16b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
3stepit.bnpparibas.fr
bnp02b.bnpparibas.com
international-buyers.bnpparibas.fr
bnp02b.bnpparibas.com
challenges.leasingsolutions.bnpparibas.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.produitsdebourse.bnpparibas.fr
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
collect-bnppf.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03s.bnpparibas.com
secure1.entreprises.bnpparibas.fr
bnp05s.bnpparibas.com
bnp03b.bnpparibas.com
patrimoine.reim.bnpparibas.fr
extranet.proprietaires.immobilier.bnpparibas.fr
staging.logement.bnpparibas.fr
bnp03s.bnpparibas.com
bnp16b.bnpparibas.com
staging.scpi.bnpparibas.fr
collect-bnl.staging.bnpparibas.fr
scpi-distributeurs.realestate.bnpparibas.fr
bnp13b.bnpparibas.com
bnp02b.bnpparibas.com
mutuelle.bnpparibas.fr
leaseoffers.leasingsolutions.bnpparibas.fr

Certificate

The complete raw certificate details for dspp.bnpparibas.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQ13zS14FvlWxJTH50Pb
Hxka+BP1ThEwBlKkGeytq/WRR2XmM/jFGYCEOFj8uYCWYoKmY7CiYjWmjt5LrLiq
VZaGYrRqrLOo82XMeLcsiKlyMwZdB2D20cc5KOcaEUOgaVVoMnFnWH04DEXBxQxk
WZ2OwD/jCsdUyEMIs0fq4r5quAxngg4JcAySSJ07o9JnhlxUgCPA6UdVnBINFgyV
kPOVQojJv0UyJZWpc0C4msG3Iepyt1SuqeEneKYOlw9lPMfYRRTMmZbaswLVLVG5
EbY7+ooHP9KKIvqxPrVNQ9TLz4ro53EZ9pI0ZivWIn9QyvOK5k4SLq1oegocMK46
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37542146221899614019310110701595673562
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Terms of use at https://www.verisign.com/rpa (c)10'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VeriSign Class 3 Secure Server CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-03-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-05-18 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'BNP PARIBAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'dspp.bnpparibas.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20331008405292124886645286413651415578426924569630563304995114106132669468769936235596177212101001174522524333436928767019276575394706637844438769790861506152381767678508545091550502570641727867006535675318125066862625436512180949344501769115252714602150653957252530034672763084742100707888774325681748140873540610015056300498670484001716551439724141625856015967766563215254473435450497415797826190296222344637157008296341078533281722101339933196536115251216561883083983988961061386682491155893986492979285969061933607613959689811556383617620025703354761692098073868523741723658277061543195974588058004030663171127959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-crl.verisign.com/SVRSecureG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.23.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.verisign.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d445c165344c1827e1d20ab25f40163d8be79a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.verisign.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://SVRSecure-G3-aia.verisign.com/SVRSecureG3.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.12 (logoType)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'image/gif'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.14.3.2.26 (sha1)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
															4b6bb92896060cbbd052389b29ac4b078b210518
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://logo.verisign.com/vslogo1.gif'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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