oak-extranet-op435.staging.bnpparibas-am.com
- BNP PARIBAS SA -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number ee:5f:cd:d2:84:ab:96:94:00:00:00:00:50:fa:e4:2a was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BNP PARIBAS SA
Organization:
BNP PARIBAS SA
Locality:
Montreuil
Country: FR
Country: FR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): ee:5f:cd:d2:84:ab:96:94:00:00:00:00:50:fa:e4:2aSerial Number (int): 316853705771313121660426485346441290794
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 8a:c3:1c:46:ae:bd:85:dc:2e:99:fc:24:6e:a7:ea:ff:f1:58:6b:a7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 42:f5:71:e6:a7:06:43:f3:b4:88:88:25:d3:ae:8f:c8:3f:2d:ee:85
Fingerprint (sha256): 06:f1:10:27:57:33:f8:87:6a:b7:2e:1e:09:c1:f5:9c:86:f4:b2:21:a2:d9:94:fe:f6:cf:2e:9b:bb:b2:50:60
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate oak-extranet-op435.staging.bnpparibas-am.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for oak-extranet-op435.staging.bnpparibas-am.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
oak-extranet-op435.staging.bnpparibas-am.com
www.oak-extranet-op435.staging.bnpparibas-am.com
www.oak-extranet-op435.staging.bnpparibas-am.com
Other certificates including the domain name bnpparibas-am.com
(limited to 100 certificates)
bnp16b.bnpparibas.com
bnp04s.bnpparibas.com
bnp12b.bnpparibas.com
robo.staging.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
docfinder.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp07b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
bnp07b.bnpparibas.com
portal.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp09s.bnpparibas.com
bnp06s.bnpparibas.com
cwextranet-simple.is.bnpparibas-ip.com
web-elearning.bnpparibas-am.com
oak-extranet-op435.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp07b.bnpparibas.com
loanez-gatewayapi.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
invest-academy.staging.bnpparibas-am.com
bnp02b.bnpparibas.com
partners-extranet.staging.bnpparibas-am.com
institutional.bnpparibas-am.com
bnp12b.bnpparibas.com
oak-custom-int.staging.bnpparibas-am.com
bnp06b.bnpparibas.com
ce.bnpparibas-am.com
bnp08s.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
epargne-retraite-entreprises.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
smealternativefinancing.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp06s.bnpparibas.com
investo.bnpparibas
sustainable-responsible-investments.staging.bnpparibas-am.com
bnp07b.bnpparibas.com
mediaroom-en.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp12b.bnpparibas.com
oak-extranet-op435.is.bnpparibas-am.com
www.ce.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp06s.bnpparibas.com
bnp08b.bnpparibas.com
bnp12b.bnpparibas.com
bnp03b.bnpparibas.com
bnp08s.bnpparibas.com
ere-portals-extranet.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp06b.bnpparibas.com
owa-pub.bnpparibas-am.com
bnp06s.bnpparibas.com
ce.bnpparibas-am.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
bnp03b.bnpparibas.com
bnp04s.bnpparibas.com
erelio.staging.bnpparibas-ip.com
gateway.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp07b.bnpparibas.com
bnp04s.bnpparibas.com
bnp07b.bnpparibas.com
api.bnpparibas-am.com
loanez-identityserver.staging.bnpparibas-am.com
ere-portals-internet.staging.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp08s.bnpparibas.com
badge.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp08s.bnpparibas.com
bnp06b.bnpparibas.com
bnp07b.bnpparibas.com
ere-portals-extranet.bnpparibas-am.com
bnp16b.bnpparibas.com
net.staging.bnpparibas-am.com
owa-pub.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp08s.bnpparibas.com
bnp04s.bnpparibas.com
factor-investing.staging.bnpparibas-am.com
bnp08s.bnpparibas.com
smealternativefinancing.bnpparibas-am.com
ere-portals-internet-int.staging.bnpparibas-am.com
bnp02b.bnpparibas.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
bnp06s.bnpparibas.com
bnp04s.bnpparibas.com
bnp12b.bnpparibas.com
robo.staging.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
docfinder.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp07b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
bnp07b.bnpparibas.com
portal.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp09s.bnpparibas.com
bnp06s.bnpparibas.com
cwextranet-simple.is.bnpparibas-ip.com
web-elearning.bnpparibas-am.com
oak-extranet-op435.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp07b.bnpparibas.com
loanez-gatewayapi.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
invest-academy.staging.bnpparibas-am.com
bnp02b.bnpparibas.com
partners-extranet.staging.bnpparibas-am.com
institutional.bnpparibas-am.com
bnp12b.bnpparibas.com
oak-custom-int.staging.bnpparibas-am.com
bnp06b.bnpparibas.com
ce.bnpparibas-am.com
bnp08s.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp02b.bnpparibas.com
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
epargne-retraite-entreprises.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
smealternativefinancing.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp06s.bnpparibas.com
investo.bnpparibas
sustainable-responsible-investments.staging.bnpparibas-am.com
bnp07b.bnpparibas.com
mediaroom-en.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp12b.bnpparibas.com
oak-extranet-op435.is.bnpparibas-am.com
www.ce.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp06s.bnpparibas.com
bnp08b.bnpparibas.com
bnp12b.bnpparibas.com
bnp03b.bnpparibas.com
bnp08s.bnpparibas.com
ere-portals-extranet.bnpparibas-am.com
bnp04s.bnpparibas.com
bnp06b.bnpparibas.com
owa-pub.bnpparibas-am.com
bnp06s.bnpparibas.com
ce.bnpparibas-am.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
bnp03b.bnpparibas.com
bnp04s.bnpparibas.com
erelio.staging.bnpparibas-ip.com
gateway.staging.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp07b.bnpparibas.com
bnp04s.bnpparibas.com
bnp07b.bnpparibas.com
api.bnpparibas-am.com
loanez-identityserver.staging.bnpparibas-am.com
ere-portals-internet.staging.bnpparibas-am.com
bnp05s.bnpparibas.com
bnp08s.bnpparibas.com
badge.bnpparibas-am.com
bnp12b.bnpparibas.com
bnp08s.bnpparibas.com
bnp06b.bnpparibas.com
bnp07b.bnpparibas.com
ere-portals-extranet.bnpparibas-am.com
bnp16b.bnpparibas.com
net.staging.bnpparibas-am.com
owa-pub.staging.bnpparibas-am.com
bnp06s.bnpparibas.com
bnp08s.bnpparibas.com
bnp04s.bnpparibas.com
factor-investing.staging.bnpparibas-am.com
bnp08s.bnpparibas.com
smealternativefinancing.bnpparibas-am.com
ere-portals-internet-int.staging.bnpparibas-am.com
bnp02b.bnpparibas.com
bnp07b.bnpparibas.com
bnp02b.bnpparibas.com
bnp06s.bnpparibas.com
Certificate
The complete raw certificate details for oak-extranet-op435.staging.bnpparibas-am.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFozCCBIugAwIBAgIRAO5fzdKEq5aUAAAAAFD65CowDQYJKoZIhvcNAQELBQAw gboxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1FbnRydXN0LCBJbmMuMSgwJgYDVQQL Ex9TZWUgd3d3LmVudHJ1c3QubmV0L2xlZ2FsLXRlcm1zMTkwNwYDVQQLEzAoYykg MjAxMiBFbnRydXN0LCBJbmMuIC0gZm9yIGF1dGhvcml6ZWQgdXNlIG9ubHkxLjAs BgNVBAMTJUVudHJ1c3QgQ2VydGlmaWNhdGlvbiBBdXRob3JpdHkgLSBMMUswHhcN MTkxMTI4MTMyODUxWhcNMjExMTI3MTM1ODUwWjBxMQswCQYDVQQGEwJGUjESMBAG A1UEBxMJTW9udHJldWlsMRcwFQYDVQQKEw5CTlAgUEFSSUJBUyBTQTE1MDMGA1UE AxMsb2FrLWV4dHJhbmV0LW9wNDM1LnN0YWdpbmcuYm5wcGFyaWJhcy1hbS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7guGNy3aeWbefTP+JtcUS LFU3t5kf/OgVtBQK4d9dXe9foqkg+alS7FcegR95VG0hHEiYjELcvGnCIRepbly3 YVnL0tC13fEXn8v+B1VnQArF1rT4yw/zSWLw+ssZywDdmnFmiyYniP0WrmWLZYjJ p7EjwsC4fxBpCg/Qr2ISgSiIqpwchZBv1S1gO4wQyzljj3Z4r9xD/8L40dXKVGyc ysGZKxJEGXphzm4xHk4kxumX49VFTglyvkH1j+Nl0UKQbmNThyDu6CSnAsBj6IoC sWNPuw9Va+o+8fI6YD7RowvrRHcSkb0j2vVKPt91stp+JR5xjgiQbIB1ML07bs01 AgMBAAGjggHqMIIB5jATBgorBgEEAdZ5AgQDAQH/BAIFADBpBgNVHREEYjBggixv YWstZXh0cmFuZXQtb3A0MzUuc3RhZ2luZy5ibnBwYXJpYmFzLWFtLmNvbYIwd3d3 Lm9hay1leHRyYW5ldC1vcDQzNS5zdGFnaW5nLmJucHBhcmliYXMtYW0uY29tMA4G A1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYD VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy bDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDov L3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAj BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSME GDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUisMcRq69hdwumfwk bqfq//FYa6cwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAK0FiEUVYk/C+ AS44aMPR0MpxLxHApAHob3vMt3puGETP1OSD058KDNA0DgmfniAFBBF+ZaeM8jWj kLyN76qA2PnRnt9hx0HfX/Nej0153OiC265mAjWSVs3AWidE8dx6s7CbYIDYrnmF sJyb8PKXiaap9cIKcBXiB4tHMA9ZQ+NP7GRQfQ6vB7MFDYWZ9+bGAdOn7L2emNLW aGFgUyzH5VV4hglYWKP0pQEd6QAOAwYuz/TCpOR6rdpEeCxcdBrxT8V0dlzz0Gaj 2uUewEa2mgS/CJvCb2GwwY+r9Hqp0A+fgIlzjLGCPTAp7pOOgQI+bsm77Asg4lP3 94zH3Td0xA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4Lhjct2nlm3n0z/ibXF EixVN7eZH/zoFbQUCuHfXV3vX6KpIPmpUuxXHoEfeVRtIRxImIxC3LxpwiEXqW5c t2FZy9LQtd3xF5/L/gdVZ0AKxda0+MsP80li8PrLGcsA3ZpxZosmJ4j9Fq5li2WI yaexI8LAuH8QaQoP0K9iEoEoiKqcHIWQb9UtYDuMEMs5Y492eK/cQ//C+NHVylRs nMrBmSsSRBl6Yc5uMR5OJMbpl+PVRU4Jcr5B9Y/jZdFCkG5jU4cg7ugkpwLAY+iK ArFjT7sPVWvqPvHyOmA+0aML60R3EpG9I9r1Sj7fdbLafiUecY4IkGyAdTC9O27N NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 316853705771313121660426485346441290794 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-28 13:28:51 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-27 13:58:50 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'oak-extranet-op435.staging.bnpparibas-am.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23671102889637752370363327723477329039548018394116123451830386570398162253462380510107908048544380576674373244970641325525231319039230364830546492509803960720506736973869496565939453547502021935252029035046946344717878847769954517688171541930000950199530223947003340187597409924193843074384692408196278878427411838309811072918684495103229049208194482893634464456946894458082421652045427709399736558797495983517072685175588864786438537636903173673137996157756063461550411953467406197904888078238137557744657088398845778647211809377845900658248455294133639006315677395108256772074453199456835515422898981427735981641013 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oak-extranet-op435.staging.bnpparibas-am.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oak-extranet-op435.staging.bnpparibas-am.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8ac31c46aebd85dc2e99fc246ea7eafff1586ba7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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