bnp19b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:6a:8d:46:56:56:b2:9f:17:52:f4:02:83:37:d4:e9 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:6a:8d:46:56:56:b2:9f:17:52:f4:02:83:37:d4:e9
Serial Number (int): 11187072825730031576957563642261787881
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1e:b9:0c:e2:e7:53:65:69:a7:37:96:fb:36:43:7a:f4:37:1f:84:35
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 43:3c:3e:47:20:5d:c3:63:36:87:79:fb:77:67:3d:20:44:d7:b1:d9
Fingerprint (sha256): 04:b1:e5:5d:2a:62:ca:04:88:f1:16:bc:c3:cc:31:e0:4d:eb:ea:11:d4:81:83:a0:74:08:79:18:9f:cc:1c:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp19b.bnpparibas.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp19b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp19b.bnpparibas.com
cas-mock.rcs.co.za
cas-qa.rcs.co.za
creditmoderne-prod-speed.neuges.org
diagprevoyance.bnpparibas.com
distrib-preprod.cetelem.fr
espace-contrats.bnpparibas-pf.com
espace-contrats.cetelem.fr
espace-contrats.cofinoga.fr
espace-contrats.creditclick.fr
espace-contrats.domofinance.com
espace-contrats.norrsken.fr
hom-2.credit-moderne.com
homol-icommerce.neuges.org
homol-inetgp.neuges.org
homologation.renovpret.fr
moncontrat-projeo.neuges.org
moncontrat.cafineo.fr
moncontrat.cetelem.fr
moncontrat.cofinoga.fr
moncontrat.domofinance.com
moncontrat.domofinance.fr
moncontrat.norrsken.fr
mywealth-staging.bnpparibas.de
partenariat.bnpparibas-pf.com
pegasus-wm-test.bnpparibas.com
pf-partners.cetelem.fr
pre-prod-stock-auto.cetelem.fr
prod.cofinoga.fr
prod.credit-moderne.com
professionalbanking-wealthmanagement-staging.bnpparibas.com
rec-moncontrat.renovpret.fr
recette-cmonbusiness.bnpparibas-pf.com
recette-espace-contrats-cafineo-fr.neuges.org
recette-espace-contrats-cetelem.neuges.org
recette-espace-contrats-credit-moderne.neuges.org
recette-espace-contrats-domofinance.neuges.org
recette-moncontrat.neuges.org
recette-partenariat-bnpparibas-pf-com.neuges.org
recette-ppewshop-restricted.neuges.org
recette-services-cetelem-fr.neuges.org
recette-simulateur-credit-domofinance.neuges.org
recette.auto.signature.neuges.org
recette.cetelem-esignrc.bnpparibas-pf.com
recette.courtier-sygma-esignrc.bnpparibas-pf.com
recette.dist-auto.signature.neuges.org
recette.emprunteur.signature.neuges.org
recette.espace-contrats.bnpparibas-pf.com
recette.espace-contrats.cofinoga.fr
recette.espace-contrats.emprunteur.neuges.org
recette.espace-contrats.prescripteur.neuges.org
recette.partinst-esignrc.bnpparibas-pf.com
recette.portaildeclassement.neuges.org
recette.prescripteur.signature.neuges.org
recette.signature-vad.domofinance.com
recette.sygma-esignrc.bnpparibas-pf.com
recette.vuevendeur.neuges.org
renovpret.fr
sec.neuges.org
secure.cetelem.fr
simulateur.credit.domofinance.com
simulationrentes-c1-assurance.staging.cardif.fr
simulationrentes-prod-tmp-assurance.cardif.fr
staging.rcs.co.za
staging.renovpret.fr
stock-auto.cetelem.fr
track-qa.rcs.co.za
track.rcs.co.za
voc-staging.bnpparibas.asia
voiceofwealth.staging.bnpparibas
wealth-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas
wealthmanagement-staging.bnpparibas.asia
wealthmanagement-staging.bnpparibas.com
wm-prod-speed.neuges.org
wm-rct2-speed.neuges.org
wm-rt-speed.neuges.org
www.renovpret.fr
www.simulationrentes-c1-assurance.staging.cardif.fr
www.simulationrentes-prod-tmp-assurance.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp19b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO5zCCDc+gAwIBAgIQCGqNRlZWsp8XUvQCgzfU6TANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAzMjMwMDAwMDBa
Fw0yMzA2MDYyMzU5NTlaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUg
RnJhbmNlMRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFT
IFNBMR4wHAYDVQQDExVibnAxOWIuYm5wcGFyaWJhcy5jb20wWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAASz7CRg7k+DztToGF6yzjjxgxbqUWxh2lY9BP0frzdOjTZ9
yDz+JQjWE+8m1lI88KCwYgX38tkwDS+yTtk5M5pgo4IMZTCCDGEwHwYDVR0jBBgw
FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFB65DOLnU2VppzeW+zZD
evQ3H4Q1MIIKewYDVR0RBIIKcjCCCm6CFWJucDE5Yi5ibnBwYXJpYmFzLmNvbYIS
Y2FzLW1vY2sucmNzLmNvLnphghBjYXMtcWEucmNzLmNvLnphgiNjcmVkaXRtb2Rl
cm5lLXByb2Qtc3BlZWQubmV1Z2VzLm9yZ4IdZGlhZ3ByZXZveWFuY2UuYm5wcGFy
aWJhcy5jb22CGmRpc3RyaWItcHJlcHJvZC5jZXRlbGVtLmZygiFlc3BhY2UtY29u
dHJhdHMuYm5wcGFyaWJhcy1wZi5jb22CGmVzcGFjZS1jb250cmF0cy5jZXRlbGVt
LmZyghtlc3BhY2UtY29udHJhdHMuY29maW5vZ2EuZnKCHmVzcGFjZS1jb250cmF0
cy5jcmVkaXRjbGljay5mcoIfZXNwYWNlLWNvbnRyYXRzLmRvbW9maW5hbmNlLmNv
bYIbZXNwYWNlLWNvbnRyYXRzLm5vcnJza2VuLmZyghhob20tMi5jcmVkaXQtbW9k
ZXJuZS5jb22CGmhvbW9sLWljb21tZXJjZS5uZXVnZXMub3Jnghdob21vbC1pbmV0
Z3AubmV1Z2VzLm9yZ4IZaG9tb2xvZ2F0aW9uLnJlbm92cHJldC5mcoIcbW9uY29u
dHJhdC1wcm9qZW8ubmV1Z2VzLm9yZ4IVbW9uY29udHJhdC5jYWZpbmVvLmZyghVt
b25jb250cmF0LmNldGVsZW0uZnKCFm1vbmNvbnRyYXQuY29maW5vZ2EuZnKCGm1v
bmNvbnRyYXQuZG9tb2ZpbmFuY2UuY29tghltb25jb250cmF0LmRvbW9maW5hbmNl
LmZyghZtb25jb250cmF0Lm5vcnJza2VuLmZygh5teXdlYWx0aC1zdGFnaW5nLmJu
cHBhcmliYXMuZGWCHXBhcnRlbmFyaWF0LmJucHBhcmliYXMtcGYuY29tgh5wZWdh
c3VzLXdtLXRlc3QuYm5wcGFyaWJhcy5jb22CFnBmLXBhcnRuZXJzLmNldGVsZW0u
ZnKCHnByZS1wcm9kLXN0b2NrLWF1dG8uY2V0ZWxlbS5mcoIQcHJvZC5jb2Zpbm9n
YS5mcoIXcHJvZC5jcmVkaXQtbW9kZXJuZS5jb22CO3Byb2Zlc3Npb25hbGJhbmtp
bmctd2VhbHRobWFuYWdlbWVudC1zdGFnaW5nLmJucHBhcmliYXMuY29tghtyZWMt
bW9uY29udHJhdC5yZW5vdnByZXQuZnKCJnJlY2V0dGUtY21vbmJ1c2luZXNzLmJu
cHBhcmliYXMtcGYuY29tgi1yZWNldHRlLWVzcGFjZS1jb250cmF0cy1jYWZpbmVv
LWZyLm5ldWdlcy5vcmeCKnJlY2V0dGUtZXNwYWNlLWNvbnRyYXRzLWNldGVsZW0u
bmV1Z2VzLm9yZ4IxcmVjZXR0ZS1lc3BhY2UtY29udHJhdHMtY3JlZGl0LW1vZGVy
bmUubmV1Z2VzLm9yZ4IucmVjZXR0ZS1lc3BhY2UtY29udHJhdHMtZG9tb2ZpbmFu
Y2UubmV1Z2VzLm9yZ4IdcmVjZXR0ZS1tb25jb250cmF0Lm5ldWdlcy5vcmeCMHJl
Y2V0dGUtcGFydGVuYXJpYXQtYm5wcGFyaWJhcy1wZi1jb20ubmV1Z2VzLm9yZ4Im
cmVjZXR0ZS1wcGV3c2hvcC1yZXN0cmljdGVkLm5ldWdlcy5vcmeCJnJlY2V0dGUt
c2VydmljZXMtY2V0ZWxlbS1mci5uZXVnZXMub3JngjByZWNldHRlLXNpbXVsYXRl
dXItY3JlZGl0LWRvbW9maW5hbmNlLm5ldWdlcy5vcmeCIXJlY2V0dGUuYXV0by5z
aWduYXR1cmUubmV1Z2VzLm9yZ4IpcmVjZXR0ZS5jZXRlbGVtLWVzaWducmMuYm5w
cGFyaWJhcy1wZi5jb22CMHJlY2V0dGUuY291cnRpZXItc3lnbWEtZXNpZ25yYy5i
bnBwYXJpYmFzLXBmLmNvbYImcmVjZXR0ZS5kaXN0LWF1dG8uc2lnbmF0dXJlLm5l
dWdlcy5vcmeCJ3JlY2V0dGUuZW1wcnVudGV1ci5zaWduYXR1cmUubmV1Z2VzLm9y
Z4IpcmVjZXR0ZS5lc3BhY2UtY29udHJhdHMuYm5wcGFyaWJhcy1wZi5jb22CI3Jl
Y2V0dGUuZXNwYWNlLWNvbnRyYXRzLmNvZmlub2dhLmZygi1yZWNldHRlLmVzcGFj
ZS1jb250cmF0cy5lbXBydW50ZXVyLm5ldWdlcy5vcmeCL3JlY2V0dGUuZXNwYWNl
LWNvbnRyYXRzLnByZXNjcmlwdGV1ci5uZXVnZXMub3JngipyZWNldHRlLnBhcnRp
bnN0LWVzaWducmMuYm5wcGFyaWJhcy1wZi5jb22CJnJlY2V0dGUucG9ydGFpbGRl
Y2xhc3NlbWVudC5uZXVnZXMub3JngilyZWNldHRlLnByZXNjcmlwdGV1ci5zaWdu
YXR1cmUubmV1Z2VzLm9yZ4IlcmVjZXR0ZS5zaWduYXR1cmUtdmFkLmRvbW9maW5h
bmNlLmNvbYIncmVjZXR0ZS5zeWdtYS1lc2lnbnJjLmJucHBhcmliYXMtcGYuY29t
gh1yZWNldHRlLnZ1ZXZlbmRldXIubmV1Z2VzLm9yZ4IMcmVub3ZwcmV0LmZygg5z
ZWMubmV1Z2VzLm9yZ4IRc2VjdXJlLmNldGVsZW0uZnKCIXNpbXVsYXRldXIuY3Jl
ZGl0LmRvbW9maW5hbmNlLmNvbYIvc2ltdWxhdGlvbnJlbnRlcy1jMS1hc3N1cmFu
Y2Uuc3RhZ2luZy5jYXJkaWYuZnKCLXNpbXVsYXRpb25yZW50ZXMtcHJvZC10bXAt
YXNzdXJhbmNlLmNhcmRpZi5mcoIRc3RhZ2luZy5yY3MuY28uemGCFHN0YWdpbmcu
cmVub3ZwcmV0LmZyghVzdG9jay1hdXRvLmNldGVsZW0uZnKCEnRyYWNrLXFhLnJj
cy5jby56YYIPdHJhY2sucmNzLmNvLnphght2b2Mtc3RhZ2luZy5ibnBwYXJpYmFz
LmFzaWGCIHZvaWNlb2Z3ZWFsdGguc3RhZ2luZy5ibnBwYXJpYmFzgh53ZWFsdGgt
c3RhZ2luZy5ibnBwYXJpYmFzLmFzaWGCI3dlYWx0aG1hbmFnZW1lbnQtc3RhZ2lu
Zy5ibnBwYXJpYmFzgih3ZWFsdGhtYW5hZ2VtZW50LXN0YWdpbmcuYm5wcGFyaWJh
cy5hc2lhgid3ZWFsdGhtYW5hZ2VtZW50LXN0YWdpbmcuYm5wcGFyaWJhcy5jb22C
GHdtLXByb2Qtc3BlZWQubmV1Z2VzLm9yZ4IYd20tcmN0Mi1zcGVlZC5uZXVnZXMu
b3JnghZ3bS1ydC1zcGVlZC5uZXVnZXMub3JnghB3d3cucmVub3ZwcmV0LmZygjN3
d3cuc2ltdWxhdGlvbnJlbnRlcy1jMS1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYu
ZnKCMXd3dy5zaW11bGF0aW9ucmVudGVzLXByb2QtdG1wLWFzc3VyYW5jZS5jYXJk
aWYuZnIwDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5j
b20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRw
Oi8vY3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0Ex
LTQuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6
Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUH
MAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDov
L2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENB
MS0xLmNydDAJBgNVHRMEAjAAMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQAWdddc2IRsDigyzDF1YRV4wMAZccGZG0VNo6eqy0dlkd4F7eAv
VvZpTC1WD6I+qqTKFxdD2VW/JgS0pZuDcKX5Dj4cX/TKF6QqbqzAoXnTKwOAjE3z
Xvu18WCfLRaIhgLNz9zdXRWvFhNY5SPk/VHPpVQVHtfvPK5XbYGOAsdxWCWK0+OY
V0BAlQU5Mrk8jZ3WOQtkWlCxMqwUsm1BqFYJ7QrfEk9RirhEar0GGxwfBD84MOmY
NwWCj+QNByhEP6T4ia26YTs5MwFf/FERMj8NLvIYE67SUn9QVpcCUZ5ElciZmBD8
wYmNihk1g1UGytHYazVc9vRjOUpg5IL4k5Nw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEs+wkYO5Pg87U6Bhess448YMW6lFs
YdpWPQT9H683To02fcg8/iUI1hPvJtZSPPCgsGIF9/LZMA0vsk7ZOTOaYA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11187072825730031576957563642261787881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp19b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b3ec2460ee4f83ced4e8185eb2ce38f18316ea516c61da563d04fd1faf374e8d367dc83cfe2508d613ef26d6523cf0a0b06205f7f2d9300d2fb24ed939339a60
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1eb90ce2e7536569a73796fb36437af4371f8435
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2674 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp19b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-mock.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditmoderne-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diagprevoyance.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'distrib-preprod.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-contrats.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom-2.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-icommerce.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-inetgp.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat-projeo.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.domofinance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.norrsken.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth-staging.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenariat.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus-wm-test.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pf-partners.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-prod-stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec-moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cafineo-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-cetelem.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-credit-moderne.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-espace-contrats-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-moncontrat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-partenariat-bnpparibas-pf-com.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-ppewshop-restricted.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-services-cetelem-fr.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-simulateur-credit-domofinance.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.dist-auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.emprunteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.espace-contrats.prescripteur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portaildeclassement.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.vuevendeur.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sec.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulateur.credit.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stock-auto.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'track.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceofwealth.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealth-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-prod-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rct2-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationrentes-prod-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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