nmb.credit-agricole.fr

- Credit Agricole SA -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number ed:bb:42:4a:bd:fb:05:bf:f5:76:eb:7a:e8:40:7e:fd was issued on by Sectigo Limited.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Credit Agricole SA

Organization: Credit Agricole SA
State / Province: Île-de-France
Country: FR

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): ed:bb:42:4a:bd:fb:05:bf:f5:76:eb:7a:e8:40:7e:fd
Serial Number (int): 315999339074285076100352044379087601405
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e2:f8:c9:55:bc:68:0c:7f:2f:70:2f:80:ab:80:c9:c7:82:44:b6:d3
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): 0c:ca:c3:e8:e4:f2:b1:7e:ee:66:04:d4:21:23:89:78:52:0d:d8:4d
Fingerprint (sha256): 02:fc:3c:48:10:be:f2:9a:19:76:cc:91:0c:a5:ca:04:7f:de:f6:4e:6e:65:24:ed:8e:0c:33:bd:46:4a:25:c4

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate nmb.credit-agricole.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nmb.credit-agricole.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nmb.credit-agricole.fr

Other certificates including the domain name credit-agricole.fr

(limited to 100 certificates)
crys.collab.ca-alpesprovence.credit-agricole.fr
www.ds-enligne.creditconso.credit-agricole.fr
silca-mobile.credit-agricole.fr
ata0.collab.ca-nehom-zxr10.credit-agricole.fr
mus10-mesidir.ca-technologies.credit-agricole.fr
sea0tab-00813.ca-technologies.credit-agricole.fr
homologation.apis.nomade.credit-agricole.fr
simu.collab.ca-vmoe-zqta0.credit-agricole.fr
smp10-b0vcl01.ca-technologies.credit-agricole.fr
portailrct-citrix-apps-arpege.ca-sa.credit-agricole.fr
eptcident.collab.ca-martinique.credit-agricole.fr
webdav.vitrine.credit-agricole.fr
ca.nm.etrade.credit-agricole.fr
webmails.credit-agricole.fr
www.ds-g3-esimulca-enligne.credit-agricole.fr
www.aquitaine-g3-quicksign-enligne.credit-agricole.fr
sea0tab-00824.ca-technologies.credit-agricole.fr
www.tourainepoitou-g3-esimulca-enligne.credit-agricole.fr
www.morbihan-g3-enligne.credit-agricole.fr
www.normand-g3-esimulca-enligne.credit-agricole.fr
smartphone-ws.pacifica.credit-agricole.fr
www.martinique-g3-quicksign-enligne.credit-agricole.fr
gfmoawds.ca-technologies.credit-agricole.fr
hrac-hraspace.collab.ca-corse.credit-agricole.fr
www.campg-ediweb.credit-agricole.fr
siel.collab.ca-cotesdarmor.credit-agricole.fr
gedc-ged2.collab.ca-illeetvilaine.credit-agricole.fr
sea0tab-00869.ca-technologies.credit-agricole.fr
www.normand-g3-enligne.credit-agricole.fr
www.corse-g3-enligne.credit-agricole.fr
gedc.collab.ca-nord-est.credit-agricole.fr
cnet.collab.ca-normandie.credit-agricole.fr
car0.collab.ca-normandie.credit-agricole.fr
top10-b0gdc01.ca-technologies.credit-agricole.fr
www.norddefrance-g3-esimulca-enligne.credit-agricole.fr
e.artefis.credit-agricole.fr
botcli.credit-agricole.fr
ca.cl.etrade.credit-agricole.fr
cnet.collab.ca-sudrhonealpes.credit-agricole.fr
www.credit-enligne.syn.credit-agricole.fr
www.exa.prodciblee21-g2-enligne.credit-agricole.fr
ca.kp.etrade.credit-agricole.fr
vitrines.credit-agricole.fr
rct1-macarte-rest.credit-agricole.fr
cnet.collab.ca-morbihan.credit-agricole.fr
sea0tab-00860.ca-technologies.credit-agricole.fr
wac0-spsa-hom1.ca-technologies.credit-agricole.fr
massmailing-grp-ext.credit-agricole.fr
www.ca-e-trade.credit-agricole.fr
sea0-zuda0.ca-technologies.credit-agricole.fr
mus10-mesidir.ca-technologies.credit-agricole.fr
www.ds-g3-creditconso-enligne.credit-agricole.fr
www.briepicardie-g3-quicksign-enligne.credit-agricole.fr
www.paris-g4-creditconso-enligne.credit-agricole.fr
dev1-images-courriel.credit-agricole.fr
siel.collab.ca-nehom-zxr10.credit-agricole.fr
sopuwst.collab.ca-nehom-zwr10.credit-agricole.fr
www.briepicardie-g3-enligne.credit-agricole.fr
www.sudmed-g3-quicksign-enligne.credit-agricole.fr
e.artefis.credit-agricole.fr
rep10-b0gdc01.ca-technologies.credit-agricole.fr
www.franchecomte-g4-esimulca-enligne.credit-agricole.fr
int2-traceo.credit-agricole.fr
rct1-images-courriel.credit-agricole.fr
ca.al.etrade.credit-agricole.fr
www.centreouest-g3-creditconso-enligne.credit-agricole.fr
www.illeetvilaine-g4-enligne.credit-agricole.fr
eptcagt.collab.ca-alsace-vosges.credit-agricole.fr
socleicare.pacifica.credit-agricole.fr
www.normand-ediweb.credit-agricole.fr
app10-b0vcr01.ca-technologies.credit-agricole.fr
www.nmp-ediweb.credit-agricole.fr
statistiques-intranet.adsi.credit-agricole.fr
map10-b0vcl01.ca-technologies.credit-agricole.fr
m.e-immobilier.credit-agricole.fr
www.ds-s2-g2-enligne.credit-agricole.fr
botcli.credit-agricole.fr
hom1-esimulca.credit-agricole.fr
hom1-macarte-rest.credit-agricole.fr
zxr12-b0vcl01.ca-technologies.credit-agricole.fr
ca.rp.etrade.credit-agricole.fr
eptcident.collab.ca-aquitaine.credit-agricole.fr
casa-mobilite.credit-agricole.fr
collab.ca-cmds.credit-agricole.fr
www.valdefrance-g3-esimulca-enligne.credit-agricole.fr
www.charente-perigord-g3-esimulca-enligne.credit-agricole.fr
www.cmds-g3-quicksign-enligne.credit-agricole.fr
nmb.credit-agricole.fr
rct1-esigner.credit-agricole.fr
consoventeppa.credit-agricole.fr
reunion.vitrine.credit-agricole.fr
www.norddefrance-g3-esimulca-enligne.credit-agricole.fr
assurance-personnes.credit-agricole.fr
owac.collab.ca-paris.credit-agricole.fr
rct-qualitycenter.pacifica.credit-agricole.fr
sea0tab-00839.ca-technologies.credit-agricole.fr
www.corse-g3-enligne.credit-agricole.fr
sed.credit-agricole.fr
sidosimm.ca-norddefrance.credit-agricole.fr
www.lorraine-g3-quicksign-enligne.credit-agricole.fr

Certificate

The complete raw certificate details for nmb.credit-agricole.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgIRAO27Qkq9+wW/9XbreuhAfv0wDQYJKoZIhvcNAQELBQAw
gZUxCzAJBgNVBAYTAkdCMRswGQYDVQQIExJHcmVhdGVyIE1hbmNoZXN0ZXIxEDAO
BgNVBAcTB1NhbGZvcmQxGDAWBgNVBAoTD1NlY3RpZ28gTGltaXRlZDE9MDsGA1UE
AxM0U2VjdGlnbyBSU0EgT3JnYW5pemF0aW9uIFZhbGlkYXRpb24gU2VjdXJlIFNl
cnZlciBDQTAeFw0yMzA5MTgwMDAwMDBaFw0yNDA5MTcyMzU5NTlaMGQxCzAJBgNV
BAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRlLUZyYW5jZTEbMBkGA1UEChMSQ3JlZGl0
IEFncmljb2xlIFNBMR8wHQYDVQQDExZubWIuY3JlZGl0LWFncmljb2xlLmZyMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfvfCuNcyhJeCIx29ibzvTAg
2Q5JBmxe+LqXlfS/n5kzeqLFf1QUnnypxeYovraHS2o4uyCl8OwLnsfSJPCJZ6I7
H7HPWYZmTPVj7WC1k3jXYotsoGM+MTJVGCloskipGSZaLq33/aSCDO86tvjwIe+a
iYQx9dG628YIFwrPGtL+XaNyV1bgS5rkutnFVT4E7xQUYEq2NlwkcpR2lELAx9FB
+f5yDzquCb4YpxleH5xS9Wca/NnUsgv5K6A/y2C7iY5MqlsDYYRSKxuzYlls2qSI
chJa+DtM1RoALZJPa2nQV2vW3Jcdbhnl435Pi5mzmT8FvQkEkKDH6zeJtkLIxwID
AQABo4IDWzCCA1cwHwYDVR0jBBgwFoAUF9nWJSdn+THCSUPZMDZEjGypT+swHQYD
VR0OBBYEFOL4yVW8aAx/L3AvgKuAyceCRLbTMA4GA1UdDwEB/wQEAwIFoDAMBgNV
HRMBAf8EAjAAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBKBgNVHSAE
QzBBMDUGDCsGAQQBsjEBAgEDBDAlMCMGCCsGAQUFBwIBFhdodHRwczovL3NlY3Rp
Z28uY29tL0NQUzAIBgZngQwBAgIwWgYDVR0fBFMwUTBPoE2gS4ZJaHR0cDovL2Ny
bC5zZWN0aWdvLmNvbS9TZWN0aWdvUlNBT3JnYW5pemF0aW9uVmFsaWRhdGlvblNl
Y3VyZVNlcnZlckNBLmNybDCBigYIKwYBBQUHAQEEfjB8MFUGCCsGAQUFBzAChklo
dHRwOi8vY3J0LnNlY3RpZ28uY29tL1NlY3RpZ29SU0FPcmdhbml6YXRpb25WYWxp
ZGF0aW9uU2VjdXJlU2VydmVyQ0EuY3J0MCMGCCsGAQUFBzABhhdodHRwOi8vb2Nz
cC5zZWN0aWdvLmNvbTAhBgNVHREEGjAYghZubWIuY3JlZGl0LWFncmljb2xlLmZy
MIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQB2/4g/Crb7lVHCYcz1h7o0tKTN
uyncaEIKn+ZnTFo6dAAAAYqodziuAAAEAwBGMEQCIEwvljzB88wCKUVT4dts8mah
+u8xItvlIOTllrgE12+yAiBiuJsE4wDDhMGGOK5vjX1gTLFBd0CfVx6FEUF/sZva
fwB2ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABiqh3OQ4AAAQD
AEcwRQIhAKbNl4YGA7lNczlptDn5BfECJs68o5PShoGlIngQzT3gAiBd9xtdC/X/
ZgLAXUoUTMjYnVR3Csko967903cgkQmQzgB3AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABiqh3ONcAAAQDAEgwRgIhAIV2F10FHvOXScw3v4g+2aTK
Uil2BHyUmsMM4p1RaZHsAiEA6pLaC0+fZw13+ooHxUpf6TWNE8wy19hILu7QPBeb
o1AwDQYJKoZIhvcNAQELBQADggEBACzJnjwQO1nbhZTtEF9uvPnqbdPefzzERX3F
pEoP7j5RT6gc35f7Kwrsr2/F9iwgF6XGVbTRRhkXF6u9IHak4MDR9UtobiBor8hE
C3L0mW7eDGTsssIGT12+BBnZ/1RttFLwitpdCfJs/TmPw5y1gFPuEZkL2y3Y8QM/
MXeon8DV/F7h38YGpe+O5mV49feksEYpI8PjIJoa1uEVS9uFU4Ytf/2YMsBU4xfy
dqZTMhjdCk/ULV4GuVhkwO8MIvkPIEJkQHvlF8AchodkxMQ3l06YUlFJ1DB1M2xt
Idg8JB3tpWg4rJMJIssO13RPno+JLx6Bh2Ybl+6bK5Ozpa8XJ7I=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfvfCuNcyhJeCIx29ibz
vTAg2Q5JBmxe+LqXlfS/n5kzeqLFf1QUnnypxeYovraHS2o4uyCl8OwLnsfSJPCJ
Z6I7H7HPWYZmTPVj7WC1k3jXYotsoGM+MTJVGCloskipGSZaLq33/aSCDO86tvjw
Ie+aiYQx9dG628YIFwrPGtL+XaNyV1bgS5rkutnFVT4E7xQUYEq2NlwkcpR2lELA
x9FB+f5yDzquCb4YpxleH5xS9Wca/NnUsgv5K6A/y2C7iY5MqlsDYYRSKxuzYlls
2qSIchJa+DtM1RoALZJPa2nQV2vW3Jcdbhnl435Pi5mzmT8FvQkEkKDH6zeJtkLI
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 315999339074285076100352044379087601405
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Credit Agricole SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nmb.credit-agricole.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23983241985921593543213333096766285809158785672413199647334344361435051373337817898487524520549642394415963257990077302815897980847110130410566287138892677571445954193926747962129867469605296086623170128348746052394243765457288750485321677288896432803065073658899149666554901686755537258136343936161136373903502024787706452674381091358819542221757238109497082492195679460328543498280366530122149742386432301176358722549510431820878240859617025193605986985449376614845631967196281570632429078745183423356304795978199558623691064237023578910326947676565503750289704414791507080204298315495563105098028381221413913282759
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e2f8c955bc680c7f2f702f80ab80c9c78244b6d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmb.credit-agricole.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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