agences.hsbc.fr

- HSBC Group Management Services Limited -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 7c:76:04:27:0f:67:b3:a9:8c:59:dd:38:05:f2:cf:e0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

HSBC Group Management Services Limited

Organization: HSBC Group Management Services Limited
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:76:04:27:0f:67:b3:a9:8c:59:dd:38:05:f2:cf:e0
Serial Number (int): 165437046730941073501183558609028698080
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 57:20:2c:1f:d4:8a:b2:90:80:eb:ee:3a:57:5b:e3:35:e0:99:87:9e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b8:ec:cd:1b:e8:1f:d6:5b:47:08:2f:60:72:0f:7b:54:41:67:08:42
Fingerprint (sha256): 02:d6:dc:fa:9e:0b:a8:15:4c:ad:c2:1c:f8:24:64:4d:e7:86:61:24:01:85:10:f2:04:ff:86:48:c0:06:96:78

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate agences.hsbc.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for agences.hsbc.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

agences.hsbc.fr

Other certificates including the domain name hsbc.fr

(limited to 100 certificates)
www.ere.hsbc.fr
payment-web.elysnet.hsbc.fr
www.maint-wdc.m.security.online-banking.hsbc.fr
www3.hsbc.fr
sygdc-www.hsbc.fr
www.hsbc.fr
www.assetmanagement.hsbc.com
sjr.hsbc.fr
secure-messaging.hsbc.fr
investissements.clients.hsbc.fr
wdclp.client.hsbc.fr
agences.hsbc.fr
telechargement.elysnet.hsbc.fr
www.newoat.invest.hsbc.fr
mobi.ere.hsbc.fr
www.assetmanagement.hsbc.com
business.hsbc.com
services.hsbc.fr
sbweb.hsbc.fr
epargnant.ere.hsbc.fr
perspective-gsslp-wdc.hsbc.fr
ebics.hsbc.fr
idealcity-preprod.hsbc.fr
esignature.hsbc.fr
www.saas.online-banking.hsbc.fr
client.oat.hsbc.fr
www.hsbc.fr
bft.hsbc.fr
client.hsbc.fr
lp.sy-evrgrn-friif.hsbc.fr
office.elysnet.hsbc.fr
telechargement.elysnet.hsbc.fr
personal.hsbc.fr
secure-messaging-oat.hsbc.fr
trade-oat.buisness.hsbc.fr
personal.hsbc.fr
business-uat.hsbc.com.my
investissements.clients.hsbc.fr
businessclients.hsbc.fr
www.business.hsbc.fr
business-sit.hsbc.com.my
clients.hsbc.fr
client.hsbc.fr
perspective-gsslp-wdc.hsbc.fr
perspective.hsbc.fr
wdclp.m.security.online-banking.hsbc.fr
saver.ere.hsbc.fr
business-sit.hsbc.com.my
assurances-test.hsbc.fr
sbweb.newoat2.hsbc.fr
business.hsbc.com
www.hsbc.fr
www.securepaiement.elysnet.hsbc.fr
www.solution-sepa.hsbc.fr
ebics.hsbc.fr
wdc.lp.investissements.clients.hsbc.fr
personal.hsbc.fr
nwndc-www.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
perso.hsbc.fr
sbweb.newoat2.hsbc.fr
businessclients.hsbc.fr
client.hsbc.fr
zone-apex-alb-lookup.preprod.dynp.cloud1.vv1865.com
www.assetmanagement.hsbc.com
assurances-test.hsbc.fr
zone-apex-alb-lookup.prod.dynp.cloud1.vv1865.com
maint-wdc.servicing.hsbc.fr
starttoday.hsbc.fr
investissements.clients.hsbc.fr
assurance.hsbc.fr
assurances-test.hsbc.fr
sbjs.hsbc.fr
www.ere.hsbc.fr
www.hsbc.fr
www.securepaiement.elysnet.hsbc.fr
client.hsbc.fr
www.maint-wdc.services.online-banking.hsbc.fr
www.business.hsbc.fr
sbjs.newoat2.hsbc.fr
www.file.online-banking.hsbc.fr
business-uat.hsbc.com.my
www.about.hsbc.com.hk
idealcity-preprod.hsbc.fr
wdc.lp.investissements.clients.hsbc.fr
client.oat.hsbc.fr
trade-oat.business.hsbc.fr
business.hsbc.uk
www.hsbc.fr
hsbalt.altaix.hsbc.fr
www.business.hsbc.fr
saver.ere.hsbc.fr
ebics.hsbc.fr
hsbtst.altaix.hsbc.fr
assurances.hsbc.fr
sbweb.hsbc.fr
assurance-dev.hsbc.fr
saver.ere.hsbc.fr
oat.businessclients.hsbc.fr
www.privatebanking.hsbc.fr

Certificate

The complete raw certificate details for agences.hsbc.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHvzCCBqegAwIBAgIQfHYEJw9ns6mMWd04BfLP4DANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
MjEwMTkwNzIwMzhaFw0yMzEwMTkwNzIwMzdaMGkxCzAJBgNVBAYTAkdCMQ8wDQYD
VQQHEwZMb25kb24xLzAtBgNVBAoTJkhTQkMgR3JvdXAgTWFuYWdlbWVudCBTZXJ2
aWNlcyBMaW1pdGVkMRgwFgYDVQQDEw9hZ2VuY2VzLmhzYmMuZnIwggIiMA0GCSqG
SIb3DQEBAQUAA4ICDwAwggIKAoICAQCnEw+iA7vubXk0wZNwi8D8FwVdWLujJvMl
zkIvdlnorCrxhFwE2XSyGJp1zN2z5vpm4yWos7ICZkRg/dfA5cS6HRqLTK0KcB+M
SDMdMiR5fmAeDFboFHSr1szFeSlcOY0CE2gAYwSghqbF3UlzNbI+X+AwOLRplIJa
kjjG/2O6fn9YW/btIQiiljoCHZb049ipbwMFFkngZLsHNknZLesf+tTMXrTt93xO
+NOF9UlVSWdmywX9mJ5RVqDeNM1mtmVI8aQE5xfTVyWpq5EVTMsKSqjcU2Je/O7V
anqw6vilmA7Z+XQA0iPF4kgIbaPdV6LYHKGgNuwC7Iq72u+dAHVNvVDxeddNZYI2
ID4F/yyNuCBnb2efs93vLxrLl7RPB+xJAJf8FGV7CUEEgts1DtNtXawEJoFfh9Es
/j+9S54oY3XsOPRtaEKYnRHinjNS+kQC08VirvmWXaU53W+qKC6kpDE7UT9N3Cm0
PHPO8oTwGs+lff/vQMNxVVvDO6KSl/S5aJMD5DjfeTn0WnrBRV+5gGhVMiwCCbY0
1To8PFmeT3JT5NeRKbSkrYB3AK7DDqhrxroMqvxUSh/8p9ZvtdZ+t4uAZ2qt+TUs
OzG3aITTxGMMJ2uN3woMkeYbxawk4ebM2s0HDM2H8UsxqN0ThONi3ZP2wRVt8bak
rw3WDUXwZQIDAQABo4IDDzCCAwswDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUVyAs
H9SKspCA6+46V1vjNeCZh54wHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYK
TL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRy
dXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWst
Y2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz
dC5uZXQvbGV2ZWwxay5jcmwwGgYDVR0RBBMwEYIPYWdlbmNlcy5oc2JjLmZyMA4G
A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwTAYD
VR0gBEUwQzA3BgpghkgBhvpsCgEFMCkwJwYIKwYBBQUHAgEWG2h0dHBzOi8vd3d3
LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwggGBBgorBgEEAdZ5AgQCBIIBcQSC
AW0BawB3AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABg+8dmsYA
AAQDAEgwRgIhAODC4BkAwuJt/QuzvqlLwNAdOiD3kkr7+2A5W2TWgsZnAiEA7QZE
WG7ysMS6a136J4SF+olxUCHhDQsicLRqnfL77S8AdwCt9776fP8QyIudPZwePhhq
tGcpXc+xDCTKhYY069yCigAAAYPvHZrPAAAEAwBIMEYCIQDFjmgO+RRdQXLRWgDT
NHTwz+CD10oCrLWyBGC5MMi3wwIhAK4hm1nlUcNaOWZO+AfmyseqmcOULXeFIOru
jsmhYx6BAHcAtz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGD7x2b
EQAABAMASDBGAiEA/CYX7w2GqLbklul0f4oBWKKJDdt9hM7a53Ua3JRGjNQCIQCX
nJzOmUsJOyhgQMv4uZipSNBiV0Duw6dD+ghvNETeCzANBgkqhkiG9w0BAQsFAAOC
AQEAbUQ1kHLGwa04R6P3JVa4J6NcHzvfhZJ7YfJSjA9kbI+iwdEY1q7MsohKxUir
+QeOtbuaYZOtDm/6S3nLC6MSpWUrbYLmyjLg0Rkj537FFGRn16RJxtm9o64LqHHv
xzI5GeRvznx2G/NQZNiDqOGU/mQUVK3rEBYUJSIxGFegp8IVQUnlTmX3bNoeqy+G
RCygw29CnZo7xnB3Ksm6YSSZrOikgeSsknxlVe6rW1joWBoHO4c7nPJ/DKHdXyjx
SMQi/NqaQXB4NooQbyBvJVAZiVo239+clU8Xg4eIQkO+SYyTJ6/Rns+VeD5Bgu0Y
UmmZ4j+ng51OLQfditrIpMdMjA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165437046730941073501183558609028698080
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-19 07:20:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-19 07:20:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HSBC Group Management Services Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'agences.hsbc.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 681604318595354884511237563825835961443700628177231550439467235137953850123946600799370167286477754169028745089503243865490798019451243999867746991881085237264108181495299107546328783670624123525580308062776306056437786409852156315360550604538671290384804507264994234588536839453530060551216569837516315913340072094205949676123232052010738504984831551067376530023615024030255296517123568121696081741775529794722364451222396949721141643602386041628446209465971826964168487636014664626674055042261576694179179981399463801756707356135052845522407451702906498850524889245109509274309703099306833351020195961026691067067345296132839860252675483759322771081422166150318400664645714202014505404616516271289685517373485518921313405251169238462783499471133961415841579385194427698456963769310304971830042567502705799286692055713877617770752813751743757282937949712584209776899689240184928196309404071911536870492184972728869747095961044718168911554507807043160242821893588845592071430330428301325096585598757247096697303555614272423538548931746039379752037879880107215923052218173839535564974124132725466690084018438389779217387757953477739432832367528998651609449677880735320236333756547255720488795488159955289569936945334123845838524772453
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57202c1fd48ab29080ebee3a575be335e099879e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agences.hsbc.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		006d44359072c6c1ad3847a3f72556b827a35c1f3bdf85927b61f2528c0f646c8fa2c1d118d6aeccb2884ac548abf9078eb5bb9a6193ad0e6ffa4b79cb0ba312a5652b6d82e6ca32e0d11923e77ec5146467d7a449c6d9bda3ae0ba871efc7323919e46fce7c761bf35064d883a8e194fe641454adeb1016142522311857a0a7c2154149e54e65f76cda1eab2f86442ca0c36f429d9a3bc670772ac9ba612499ace8a481e4ac927c6555eeab5b58e8581a073b873b9cf27f0ca1dd5f28f148c422fcda9a417078368a106f206f255019895a36dfdf9c954f178387884243be498c9327afd19ecf95783e4182ed18526999e23fa7839d4e2d07dd8adac8a4c74c8c