bnp06s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:a4:77:77:f1:b1:5d:68:03:85:6b:ec:6b:c3:40:62 was issued on by DigiCert Inc.

With 91 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:a4:77:77:f1:b1:5d:68:03:85:6b:ec:6b:c3:40:62
Serial Number (int): 2183187790279109686033400899479748706
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ea:87:8d:bb:fa:d9:1b:91:4e:46:c7:50:df:44:b4:76:65:e5:21:c3
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): dc:2d:7f:d5:d7:40:d0:be:d2:91:37:84:55:78:4c:eb:ba:be:68:f2
Fingerprint (sha256): 02:6d:1b:e7:4a:3d:20:39:c6:ff:7e:0a:07:0c:e2:ac:62:8f:04:66:15:21:2c:4d:74:8f:f0:f1:d4:cf:7f:63

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6-1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6-1.crl

Check the revocation status for certificate bnp06s.bnpparibas.com

91

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp06s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

3dsecure.teb-kos.com
accesocitrix.cetelem.es
algerie.bnpparibas.net
antilles-guyane.bnpparibas.net
api.bcc.cetelem.es
api.ecredit.it
api2.cetelem.es
apistore.bnpparibas
apitest.ecredit.it
apixferacf.cetelem.es
authentication.bnpparibas.com
authentication.staging.bnpparibas-am.com
authentication.temp.bnpparibas.com
b2b.ecredit.it
b2btest.ecredit.it
bankingaemcoll.bnl.it
bankingcollnew.hellobank.it
biciabnet.net
bicicinet.net
bicignet.net
biciguinet.net
bicimnet.net
bnp06s.bnpparibas.com
cajamarconsumo.com
cajamarconsumo.es
cbg.uat2.bnpparibas.com
citrixlam.cardifnet.com
comercios.cetelem.es
demo-entreprises-ere.bnpparibas.com
demo-oreo.staging.bnpparibas.com
denuncioonline-bancoestado-uat.cardifnet.com
denuncioonline-uat.cardifnet.com
ebiznes.teb-kos.com
entreprises-ere.bnpparibas.com
entreprises-ere.temp.bnpparibas.com
eretail.teb-kos.com
eware.centric.bnpparibas.com
expe-122-opf.bnpparibas.com
incommerce.ecredit.it
inquiro-trade-qual.staging.bnpparibas.com
inquiro-trade.bnpparibas.com
mdm.teb-kos.com
myhubcoll.bnl.it
nc.bnpparibas.net
oauth.bcc.cetelem.es
oauth2.cetelem.es
oreo.staging.bnpparibas-am.com
oreo.temp.staging.bnpparibas-am.com
owa.teb-kos.com
privatebanking.bnl.it
recruitment.teb-kos.com
remote.teb-kos.com
remoteassist.teb-kos.com
scorekyi.cetelem.es
simuladoresauto.cetelem.es
stgdanshin.cardif.co.jp
teb-kos.com
telemarketing-pprod.cardif.es
telemarketing.cardif.es
temporaire-antilles-guyane.bnpparibas.net
temporaire-guyane.bnpparibas.net
temporaire-nc.bnpparibas.net
temporaire-www.biciabnet.net
temporaire-www.bicicinet.net
temporaire-www.bicignet.net
temporaire-www.biciguinet.net
temporaire-www.bicimnet.net
testincommerce.ecredit.it
testwebaccess.ecredit.it
webaccess.ecredit.it
webapp.teb-kos.com
webchat.teb-kos.com
welovecinema.bnpparibas
welovecinema.bnpparibas.com
welovecinema.fr
ws.cetelem.es
www.antilles-guyane.bnpparibas.net
www.biciabnet.net
www.bicicinet.net
www.bicignet.net
www.biciguinet.net
www.bicimnet.net
www.cajamarconsumo.com
www.cajamarconsumo.es
www.comercios.cetelem.es
www.findomestic.it
www.nc.bnpparibas.net
www.privatebanking.bnl.it
www.teb-kos.com
www.welovecinema.bnpparibas
wwwcollnew.hellobank.it

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp06s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOmjCCDYKgAwIBAgIQAaR3d/GxXWgDhWvsa8NAYjANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwOTMwMDAwMDAwWhcN
MjIwOTAxMjM1OTU5WjByMQswCQYDVQQGEwJGUjEWMBQGA1UECBMNSWxlIGRlIEZy
YW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJBUyBT
QTEeMBwGA1UEAxMVYm5wMDZzLmJucHBhcmliYXMuY29tMFkwEwYHKoZIzj0CAQYI
KoZIzj0DAQcDQgAE6we01/a9h0+fZ01b3sONXbY4UhfeJtjFa57hCo9fq3rCCPVL
dl0LWAM54+xjeItH6H+jFdMqY70AIuwYQf4vx6OCDBowggwWMB8GA1UdIwQYMBaA
FA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1UdDgQWBBTqh427+tkbkU5Gx1DfRLR2
ZeUhwzCCCOMGA1UdEQSCCNowggjWghQzZHNlY3VyZS50ZWIta29zLmNvbYIXYWNj
ZXNvY2l0cml4LmNldGVsZW0uZXOCFmFsZ2VyaWUuYm5wcGFyaWJhcy5uZXSCHmFu
dGlsbGVzLWd1eWFuZS5ibnBwYXJpYmFzLm5ldIISYXBpLmJjYy5jZXRlbGVtLmVz
gg5hcGkuZWNyZWRpdC5pdIIPYXBpMi5jZXRlbGVtLmVzghNhcGlzdG9yZS5ibnBw
YXJpYmFzghJhcGl0ZXN0LmVjcmVkaXQuaXSCFWFwaXhmZXJhY2YuY2V0ZWxlbS5l
c4IdYXV0aGVudGljYXRpb24uYm5wcGFyaWJhcy5jb22CKGF1dGhlbnRpY2F0aW9u
LnN0YWdpbmcuYm5wcGFyaWJhcy1hbS5jb22CImF1dGhlbnRpY2F0aW9uLnRlbXAu
Ym5wcGFyaWJhcy5jb22CDmIyYi5lY3JlZGl0Lml0ghJiMmJ0ZXN0LmVjcmVkaXQu
aXSCFWJhbmtpbmdhZW1jb2xsLmJubC5pdIIbYmFua2luZ2NvbGxuZXcuaGVsbG9i
YW5rLml0gg1iaWNpYWJuZXQubmV0gg1iaWNpY2luZXQubmV0ggxiaWNpZ25ldC5u
ZXSCDmJpY2lndWluZXQubmV0ggxiaWNpbW5ldC5uZXSCFWJucDA2cy5ibnBwYXJp
YmFzLmNvbYISY2FqYW1hcmNvbnN1bW8uY29tghFjYWphbWFyY29uc3Vtby5lc4IX
Y2JnLnVhdDIuYm5wcGFyaWJhcy5jb22CF2NpdHJpeGxhbS5jYXJkaWZuZXQuY29t
ghRjb21lcmNpb3MuY2V0ZWxlbS5lc4IjZGVtby1lbnRyZXByaXNlcy1lcmUuYm5w
cGFyaWJhcy5jb22CIGRlbW8tb3Jlby5zdGFnaW5nLmJucHBhcmliYXMuY29tgixk
ZW51bmNpb29ubGluZS1iYW5jb2VzdGFkby11YXQuY2FyZGlmbmV0LmNvbYIgZGVu
dW5jaW9vbmxpbmUtdWF0LmNhcmRpZm5ldC5jb22CE2ViaXpuZXMudGViLWtvcy5j
b22CHmVudHJlcHJpc2VzLWVyZS5ibnBwYXJpYmFzLmNvbYIjZW50cmVwcmlzZXMt
ZXJlLnRlbXAuYm5wcGFyaWJhcy5jb22CE2VyZXRhaWwudGViLWtvcy5jb22CHGV3
YXJlLmNlbnRyaWMuYm5wcGFyaWJhcy5jb22CG2V4cGUtMTIyLW9wZi5ibnBwYXJp
YmFzLmNvbYIVaW5jb21tZXJjZS5lY3JlZGl0Lml0gilpbnF1aXJvLXRyYWRlLXF1
YWwuc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIcaW5xdWlyby10cmFkZS5ibnBwYXJp
YmFzLmNvbYIPbWRtLnRlYi1rb3MuY29tghBteWh1YmNvbGwuYm5sLml0ghFuYy5i
bnBwYXJpYmFzLm5ldIIUb2F1dGguYmNjLmNldGVsZW0uZXOCEW9hdXRoMi5jZXRl
bGVtLmVzgh5vcmVvLnN0YWdpbmcuYm5wcGFyaWJhcy1hbS5jb22CI29yZW8udGVt
cC5zdGFnaW5nLmJucHBhcmliYXMtYW0uY29tgg9vd2EudGViLWtvcy5jb22CFXBy
aXZhdGViYW5raW5nLmJubC5pdIIXcmVjcnVpdG1lbnQudGViLWtvcy5jb22CEnJl
bW90ZS50ZWIta29zLmNvbYIYcmVtb3RlYXNzaXN0LnRlYi1rb3MuY29tghNzY29y
ZWt5aS5jZXRlbGVtLmVzghpzaW11bGFkb3Jlc2F1dG8uY2V0ZWxlbS5lc4IXc3Rn
ZGFuc2hpbi5jYXJkaWYuY28uanCCC3RlYi1rb3MuY29tgh10ZWxlbWFya2V0aW5n
LXBwcm9kLmNhcmRpZi5lc4IXdGVsZW1hcmtldGluZy5jYXJkaWYuZXOCKXRlbXBv
cmFpcmUtYW50aWxsZXMtZ3V5YW5lLmJucHBhcmliYXMubmV0giB0ZW1wb3JhaXJl
LWd1eWFuZS5ibnBwYXJpYmFzLm5ldIIcdGVtcG9yYWlyZS1uYy5ibnBwYXJpYmFz
Lm5ldIIcdGVtcG9yYWlyZS13d3cuYmljaWFibmV0Lm5ldIIcdGVtcG9yYWlyZS13
d3cuYmljaWNpbmV0Lm5ldIIbdGVtcG9yYWlyZS13d3cuYmljaWduZXQubmV0gh10
ZW1wb3JhaXJlLXd3dy5iaWNpZ3VpbmV0Lm5ldIIbdGVtcG9yYWlyZS13d3cuYmlj
aW1uZXQubmV0ghl0ZXN0aW5jb21tZXJjZS5lY3JlZGl0Lml0ghh0ZXN0d2ViYWNj
ZXNzLmVjcmVkaXQuaXSCFHdlYmFjY2Vzcy5lY3JlZGl0Lml0ghJ3ZWJhcHAudGVi
LWtvcy5jb22CE3dlYmNoYXQudGViLWtvcy5jb22CF3dlbG92ZWNpbmVtYS5ibnBw
YXJpYmFzght3ZWxvdmVjaW5lbWEuYm5wcGFyaWJhcy5jb22CD3dlbG92ZWNpbmVt
YS5mcoINd3MuY2V0ZWxlbS5lc4Iid3d3LmFudGlsbGVzLWd1eWFuZS5ibnBwYXJp
YmFzLm5ldIIRd3d3LmJpY2lhYm5ldC5uZXSCEXd3dy5iaWNpY2luZXQubmV0ghB3
d3cuYmljaWduZXQubmV0ghJ3d3cuYmljaWd1aW5ldC5uZXSCEHd3dy5iaWNpbW5l
dC5uZXSCFnd3dy5jYWphbWFyY29uc3Vtby5jb22CFXd3dy5jYWphbWFyY29uc3Vt
by5lc4IYd3d3LmNvbWVyY2lvcy5jZXRlbGVtLmVzghJ3d3cuZmluZG9tZXN0aWMu
aXSCFXd3dy5uYy5ibnBwYXJpYmFzLm5ldIIZd3d3LnByaXZhdGViYW5raW5nLmJu
bC5pdIIPd3d3LnRlYi1rb3MuY29tght3d3cud2Vsb3ZlY2luZW1hLmJucHBhcmli
YXOCF3d3d2NvbGxuZXcuaGVsbG9iYW5rLml0MA4GA1UdDwEB/wQEAwIHgDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwbwYDVR0fBGgwZjAxoC+gLYYraHR0
cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi0xLmNybDAxoC+gLYYr
aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNi0xLmNybDA+BgNV
HSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2lj
ZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRwOi8v
b2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRzLmRp
Z2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYDVR0T
AQH/BAIwADCCAX8GCisGAQQB1nkCBAIEggFvBIIBawFpAHcAKXm+8J45OSHwVnOf
Y6V35b5XfZxgCvj5TV0mXCVdx4QAAAF8NaKK2gAABAMASDBGAiEAhpltGq4nD9Zm
TazqVupEFpSDTldEyQ/t/nNM2q1x1WoCIQDDcNVxMiKZLzZCCgsnOGQY9xIXHqJd
XymtI2jmQdVNHQB2AFGjsPX9AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAAB
fDWiisYAAAQDAEcwRQIhAJ58HCjIiP5cxK22PLE4eFvMBQbaiIaLLKxaDpcH18lx
AiAToRA/6LV6bJqgrL85dGxMqgfVhS6u+/+lnQEd7Hv+JwB2AEHIyrHfIkZKEMah
OglCh15OMYsbA+vrS8do8JBilgb2AAABfDWiinIAAAQDAEcwRQIgCsLyJifXKH4b
SMOFi3lNC9GphiZB42VygUgElkyK2VYCIQDrkmbM7hvP52LOuuLEVZt3hcojl1+w
NO1ntydAh9zY4TANBgkqhkiG9w0BAQsFAAOCAQEArdkz8ad19pqXco7nCPjo3B8w
Rgfh14N595PG75xffuStT8LkWKHVyoUDJsJGBYGJU363kyV7o6d0yZ0M6yL4PzFN
pHig+cYJ9X1/AOeqBXGsLRHqygPo8xoYfzXfDJ524FI47bY+mCsf9+RTi7Rsb+U7
7wknmSm3IZapIyWotQTlNm6v+iTVp6g3e4fGYC9IPicAsPsiYzjQTbHNY4FmRpCI
KNZDvMljyeJvxlebkJTT+wBRh8LjnIXPPPg9oQdt/aoi6koZXHtLvEQ9mZe4I9Dc
wnIoxaVomEz+5kNcz5/+bKMZEckoudjUDoimdfASsNrNCNEPSJLaw+RdqacY7Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE6we01/a9h0+fZ01b3sONXbY4Uhfe
JtjFa57hCo9fq3rCCPVLdl0LWAM54+xjeItH6H+jFdMqY70AIuwYQf4vxw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2183187790279109686033400899479748706
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp06s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004eb07b4d7f6bd874f9f674d5bdec38d5db6385217de26d8c56b9ee10a8f5fab7ac208f54b765d0b580339e3ec63788b47e87fa315d32a63bd0022ec1841fe2fc7
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ea878dbbfad91b914e46c750df44b47665e521c3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2266 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '3dsecure.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesocitrix.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.bcc.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api2.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apistore.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apitest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apixferacf.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2btest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bankingcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp06s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajamarconsumo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cajamarconsumo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbg.uat2.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'citrixlam.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oreo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-bancoestado-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denuncioonline-uat.cardifnet.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiznes.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.temp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eretail.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.centric.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expe-122-opf.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incommerce.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-qual.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mdm.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhubcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth.bcc.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oauth2.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oreo.temp.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recruitment.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remoteassist.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scorekyi.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simuladoresauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgdanshin.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemarketing-pprod.cardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telemarketing.cardif.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testincommerce.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testwebaccess.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webaccess.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webapp.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webchat.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welovecinema.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciabnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicignet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciguinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicimnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cajamarconsumo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cajamarconsumo.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.findomestic.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nc.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.teb-kos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welovecinema.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c35a28ada000004030048304602210086996d1aae270fd6664dacea56ea441694834e5744c90fedfe734cdaad71d56a022100c370d5713222992f36420a0b27386418f712171ea25d5f29ad2368e641d54d1d00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017c35a28ac600000403004730450221009e7c1c28c888fe5cc4adb63cb138785bcc0506da88868b2cac5a0e9707d7c971022013a1103fe8b57a6c9aa0acbf39746c4caa07d5852eaefbffa59d011dec7bfe2700760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c35a28a72000004030047304502200ac2f22627d7287e1b48c3858b794d0bd1a9862641e36572814804964c8ad956022100eb9266ccee1bcfe762cebae2c4559b7785ca23975fb034ed67b7274087dcd8e1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00add933f1a775f69a97728ee708f8e8dc1f304607e1d78379f793c6ef9c5f7ee4ad4fc2e458a1d5ca850326c246058189537eb793257ba3a774c99d0ceb22f83f314da478a0f9c609f57d7f00e7aa0571ac2d11eaca03e8f31a187f35df0c9e76e05238edb63e982b1ff7e4538bb46c6fe53bef09279929b72196a92325a8b504e5366eaffa24d5a7a8377b87c6602f483e2700b0fb226338d04db1cd63816646908828d643bcc963c9e26fc6579b9094d3fb005187c2e39c85cf3cf83da1076dfdaa22ea4a195c7b4bbc443d9997b823d0dcc27228c5a568984cfee6435ccf9ffe6ca31911c928b9d8d40e88a675f012b0dacd08d10f4892dac3e45da9a718ed