bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 07:7d:14:e3:f3:2e:bc:7a:ee:25:5c:b6:40:ee:0d:ff was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:7d:14:e3:f3:2e:bc:7a:ee:25:5c:b6:40:ee:0d:ff
Serial Number (int): 9954056786057586382156979163649412607
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 59:07:c9:e5:d6:c9:ab:90:91:2d:0b:73:fc:57:36:ad:c9:ff:1e:04
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 15:2d:e9:3e:60:d8:55:0d:56:0a:b7:30:ed:d1:8f:7c:a9:e2:55:22
Fingerprint (sha256): 08:6e:8e:11:ae:39:78:39:68:83:e2:4c:81:84:35:5e:e4:d5:fd:67:13:2b:53:9c:cf:2e:84:23:ae:0d:1d:87

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07b.bnpparibas.com
alfin-pp-assurance.cardif.fr
assurance-credit.cardif.fr
atisreal.be
atisreal.com
atisreal.it
atisreal.lu
atisreal.nl
atisreal.pl
atisrealweatheralls.com
avantagescpay.aurore.com
bnpparibas-am.dk
bnpparibas-am.fi
bnpparibas-am.jp
bnpparibas-am.no
bnpparibas-am.se
bnpparibas-ip.jp
cas-temp.rcs.co.za
china.bnpparibas-am.com
conseiller-espace-retraite.mondemain.fr
consult-cptes-c01-assurance.staging.cardif.fr
consult-cptes-c02-assurance.staging.cardif.fr
consult-cptes-c03-assurance.staging.cardif.fr
consult-cptes-c04-assurance.staging.cardif.fr
content-tech-qual.cetelem.fr
dsa-manage.cardif.pl
dsa-sales.cardif.pl
dsa-services.cardif.pl
ebiz.sygmabnpparibas-pf.com
erecord.sygmabnpparibas-pf.com
espace-assurance-pp.cardif.fr
espace-client-pp.cardif.fr
espace-indemnisation-c01-rec.cardif.fr
espace-retraite.mondemain.fr
fastaccess-pp.cardif.fr
geolocalisation-pp-assurance.cardif.fr
join-us.personal-finance.bnpparibas
mabanque.mondemain.bnpparibas
mediaroom-fr.bnpparibas-am.com
moneycredit.co.za
pre-dsa-services.cardif.pl
protocolesligne-pp.cardif.fr
ptp-pp-assurance.cardif.fr
rcs.co.bw
rcs.co.za
recette-tpecible.neuges.org
roszczenia.cardif.pl
sfp-pp-assurance.cardif.fr
shaker-pp-assurance.cardif.fr
simulationrentes-pp-assurance.cardif.fr
slow-qa.rcs.co.za
ss-qa.rcs.co.za
stimare.bnpparibas.com
tecnici.stimare.bnpparibas.com
theamquant.bnpparibas-am.com
val.stimare.bnpparibas.com
viewpoint.bnpparibas-am.com
websalaries-c1-assurance.staging.cardif.fr
websalaries-c2-assurance.staging.cardif.fr
www.assurance-credit.cardif.fr
www.atisreal.be
www.atisreal.com
www.atisreal.it
www.atisreal.lu
www.atisreal.nl
www.atisreal.pl
www.atisrealweatheralls.com
www.avantagescpay.aurore.com
www.bnpparibas-am.dk
www.bnpparibas-am.fi
www.bnpparibas-am.jp
www.bnpparibas-am.no
www.bnpparibas-am.se
www.bnpparibas-ip.jp
www.consult-cptes-c01-assurance.staging.cardif.fr
www.consult-cptes-c02-assurance.staging.cardif.fr
www.consult-cptes-c03-assurance.staging.cardif.fr
www.consult-cptes-c04-assurance.staging.cardif.fr
www.dsa-manage.cardif.pl
www.dsa-sales.cardif.pl
www.dsa-services.cardif.pl
www.ebiz.sygmabnpparibas-pf.com
www.espace-indemnisation-c01-rec.cardif.fr
www.join-us.personal-finance.bnpparibas
www.moneycredit.co.za
www.pre-dsa-services.cardif.pl
www.rcs.co.bw
www.recette-tpecible.neuges.org
www.roszczenia.cardif.pl
www.stimare.bnpparibas.com
www.tecnici.stimare.bnpparibas.com
www.theamquant.bnpparibas-am.com
www.val.stimare.bnpparibas.com
www.viewpoint.bnpparibas-am.com
www.websalaries-c1-assurance.staging.cardif.fr
www.websalaries-c2-assurance.staging.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQezCCD2OgAwIBAgIQB30U4/MuvHruJVy2QO4N/zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzEyMTkwMDAwMDBa
Fw0yNDA2MDQyMzU5NTlaMHMxCzAJBgNVBAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRl
LUZyYW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJB
UyBTQTEeMBwGA1UEAxMVYm5wMDdiLmJucHBhcmliYXMuY29tMFkwEwYHKoZIzj0C
AQYIKoZIzj0DAQcDQgAEZZM3Nsyv4cx03uy/RXPmzrr7a+pFdutM2zL+GeSqxYEk
HdETedGlWwgQLo7Eddcn9lE+u0ZyIapXAZcjDy/4BaOCDfgwgg30MB8GA1UdIwQY
MBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBRZB8nl1smrkJEtC3P8
Vzatyf8eBDCCCp4GA1UdEQSCCpUwggqRghVibnAwN2IuYm5wcGFyaWJhcy5jb22C
HGFsZmluLXBwLWFzc3VyYW5jZS5jYXJkaWYuZnKCGmFzc3VyYW5jZS1jcmVkaXQu
Y2FyZGlmLmZyggthdGlzcmVhbC5iZYIMYXRpc3JlYWwuY29tggthdGlzcmVhbC5p
dIILYXRpc3JlYWwubHWCC2F0aXNyZWFsLm5sggthdGlzcmVhbC5wbIIXYXRpc3Jl
YWx3ZWF0aGVyYWxscy5jb22CGGF2YW50YWdlc2NwYXkuYXVyb3JlLmNvbYIQYm5w
cGFyaWJhcy1hbS5ka4IQYm5wcGFyaWJhcy1hbS5maYIQYm5wcGFyaWJhcy1hbS5q
cIIQYm5wcGFyaWJhcy1hbS5ub4IQYm5wcGFyaWJhcy1hbS5zZYIQYm5wcGFyaWJh
cy1pcC5qcIISY2FzLXRlbXAucmNzLmNvLnphghdjaGluYS5ibnBwYXJpYmFzLWFt
LmNvbYInY29uc2VpbGxlci1lc3BhY2UtcmV0cmFpdGUubW9uZGVtYWluLmZygi1j
b25zdWx0LWNwdGVzLWMwMS1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCLWNv
bnN1bHQtY3B0ZXMtYzAyLWFzc3VyYW5jZS5zdGFnaW5nLmNhcmRpZi5mcoItY29u
c3VsdC1jcHRlcy1jMDMtYXNzdXJhbmNlLnN0YWdpbmcuY2FyZGlmLmZygi1jb25z
dWx0LWNwdGVzLWMwNC1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCHGNvbnRl
bnQtdGVjaC1xdWFsLmNldGVsZW0uZnKCFGRzYS1tYW5hZ2UuY2FyZGlmLnBsghNk
c2Etc2FsZXMuY2FyZGlmLnBsghZkc2Etc2VydmljZXMuY2FyZGlmLnBsghtlYml6
LnN5Z21hYm5wcGFyaWJhcy1wZi5jb22CHmVyZWNvcmQuc3lnbWFibnBwYXJpYmFz
LXBmLmNvbYIdZXNwYWNlLWFzc3VyYW5jZS1wcC5jYXJkaWYuZnKCGmVzcGFjZS1j
bGllbnQtcHAuY2FyZGlmLmZygiZlc3BhY2UtaW5kZW1uaXNhdGlvbi1jMDEtcmVj
LmNhcmRpZi5mcoIcZXNwYWNlLXJldHJhaXRlLm1vbmRlbWFpbi5mcoIXZmFzdGFj
Y2Vzcy1wcC5jYXJkaWYuZnKCJmdlb2xvY2FsaXNhdGlvbi1wcC1hc3N1cmFuY2Uu
Y2FyZGlmLmZygiNqb2luLXVzLnBlcnNvbmFsLWZpbmFuY2UuYm5wcGFyaWJhc4Id
bWFiYW5xdWUubW9uZGVtYWluLmJucHBhcmliYXOCHm1lZGlhcm9vbS1mci5ibnBw
YXJpYmFzLWFtLmNvbYIRbW9uZXljcmVkaXQuY28uemGCGnByZS1kc2Etc2Vydmlj
ZXMuY2FyZGlmLnBsghxwcm90b2NvbGVzbGlnbmUtcHAuY2FyZGlmLmZyghpwdHAt
cHAtYXNzdXJhbmNlLmNhcmRpZi5mcoIJcmNzLmNvLmJ3gglyY3MuY28uemGCG3Jl
Y2V0dGUtdHBlY2libGUubmV1Z2VzLm9yZ4IUcm9zemN6ZW5pYS5jYXJkaWYucGyC
GnNmcC1wcC1hc3N1cmFuY2UuY2FyZGlmLmZygh1zaGFrZXItcHAtYXNzdXJhbmNl
LmNhcmRpZi5mcoInc2ltdWxhdGlvbnJlbnRlcy1wcC1hc3N1cmFuY2UuY2FyZGlm
LmZyghFzbG93LXFhLnJjcy5jby56YYIPc3MtcWEucmNzLmNvLnphghZzdGltYXJl
LmJucHBhcmliYXMuY29tgh50ZWNuaWNpLnN0aW1hcmUuYm5wcGFyaWJhcy5jb22C
HHRoZWFtcXVhbnQuYm5wcGFyaWJhcy1hbS5jb22CGnZhbC5zdGltYXJlLmJucHBh
cmliYXMuY29tght2aWV3cG9pbnQuYm5wcGFyaWJhcy1hbS5jb22CKndlYnNhbGFy
aWVzLWMxLWFzc3VyYW5jZS5zdGFnaW5nLmNhcmRpZi5mcoIqd2Vic2FsYXJpZXMt
YzItYXNzdXJhbmNlLnN0YWdpbmcuY2FyZGlmLmZygh53d3cuYXNzdXJhbmNlLWNy
ZWRpdC5jYXJkaWYuZnKCD3d3dy5hdGlzcmVhbC5iZYIQd3d3LmF0aXNyZWFsLmNv
bYIPd3d3LmF0aXNyZWFsLml0gg93d3cuYXRpc3JlYWwubHWCD3d3dy5hdGlzcmVh
bC5ubIIPd3d3LmF0aXNyZWFsLnBsght3d3cuYXRpc3JlYWx3ZWF0aGVyYWxscy5j
b22CHHd3dy5hdmFudGFnZXNjcGF5LmF1cm9yZS5jb22CFHd3dy5ibnBwYXJpYmFz
LWFtLmRrghR3d3cuYm5wcGFyaWJhcy1hbS5maYIUd3d3LmJucHBhcmliYXMtYW0u
anCCFHd3dy5ibnBwYXJpYmFzLWFtLm5vghR3d3cuYm5wcGFyaWJhcy1hbS5zZYIU
d3d3LmJucHBhcmliYXMtaXAuanCCMXd3dy5jb25zdWx0LWNwdGVzLWMwMS1hc3N1
cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCMXd3dy5jb25zdWx0LWNwdGVzLWMwMi1h
c3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCMXd3dy5jb25zdWx0LWNwdGVzLWMw
My1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCMXd3dy5jb25zdWx0LWNwdGVz
LWMwNC1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCGHd3dy5kc2EtbWFuYWdl
LmNhcmRpZi5wbIIXd3d3LmRzYS1zYWxlcy5jYXJkaWYucGyCGnd3dy5kc2Etc2Vy
dmljZXMuY2FyZGlmLnBsgh93d3cuZWJpei5zeWdtYWJucHBhcmliYXMtcGYuY29t
gip3d3cuZXNwYWNlLWluZGVtbmlzYXRpb24tYzAxLXJlYy5jYXJkaWYuZnKCJ3d3
dy5qb2luLXVzLnBlcnNvbmFsLWZpbmFuY2UuYm5wcGFyaWJhc4IVd3d3Lm1vbmV5
Y3JlZGl0LmNvLnphgh53d3cucHJlLWRzYS1zZXJ2aWNlcy5jYXJkaWYucGyCDXd3
dy5yY3MuY28uYneCH3d3dy5yZWNldHRlLXRwZWNpYmxlLm5ldWdlcy5vcmeCGHd3
dy5yb3N6Y3plbmlhLmNhcmRpZi5wbIIad3d3LnN0aW1hcmUuYm5wcGFyaWJhcy5j
b22CInd3dy50ZWNuaWNpLnN0aW1hcmUuYm5wcGFyaWJhcy5jb22CIHd3dy50aGVh
bXF1YW50LmJucHBhcmliYXMtYW0uY29tgh53d3cudmFsLnN0aW1hcmUuYm5wcGFy
aWJhcy5jb22CH3d3dy52aWV3cG9pbnQuYm5wcGFyaWJhcy1hbS5jb22CLnd3dy53
ZWJzYWxhcmllcy1jMS1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnKCLnd3dy53
ZWJzYWxhcmllcy1jMi1hc3N1cmFuY2Uuc3RhZ2luZy5jYXJkaWYuZnIwPgYDVR0g
BDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2Vy
dC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDBAoD6gPIY6
aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS00LmNybDB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9v
Y3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGln
aWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAMBgNV
HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdQDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAYyA/Gl2AAAEAwBGMEQCIHhsaIk5GfZa
SyYXvmAJR5dpanz6byMjSpacbVx7RkjSAiBWSUanR9LiQs6H43THOqHRJmMI2MXc
BZoIfCVpgIqR5wB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
jID8aXwAAAQDAEgwRgIhAIYkjh0u9DMYGSUNErHbu12eu3onTdb4VuiOj9GVFk4J
AiEA3Ysaz0VeDN29eO4srXm4kKw5/B9baFxKtrzOEH7yrb4AdgDatr9rP7W2Ip+b
wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYyA/GliAAAEAwBHMEUCIHG9+JSpJRC9
axlqdrUIP3OJ6uFgcKOIfBs+z7CHZ6n2AiEAyQDKl6Uh3lJnErk3LG9fAVyqK6+8
mIgs4sJ34K/Ptc4wDQYJKoZIhvcNAQELBQADggEBAIzkRs8zQjbpBrsRRuFzOqxU
sGTdVIenFtEiLUOUk38Sv5vFTEW9W1PN5Z+pG2EH68PmD7aYKL/KUogbzODCAlBF
YmClP+1iyZ/StqY42lJMyBacaQaa7qBLI4Y7Q4XcBs94GTUqAUteEk7Iich8QChc
q82LtNIrx13ElAwC3XRAH1/vDOq+DuWEEEj6IsEHR1F144wqJz1fnXScSWG5VQ61
aDHoYi+xWF25ckrwgwtG35bhjYSZKSSNptWplPG82WLl024jT9zPYQ3NY7xLMpcY
j8nz+CW+8ED6JMC7RjS9wdpAHZjXuZvmPLiJArrsOBm0njciDCA9TaT3D/o13Yo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEZZM3Nsyv4cx03uy/RXPmzrr7a+pF
dutM2zL+GeSqxYEkHdETedGlWwgQLo7Eddcn9lE+u0ZyIapXAZcjDy/4BQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9954056786057586382156979163649412607
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000465933736ccafe1cc74deecbf4573e6cebafb6bea4576eb4cdb32fe19e4aac581241dd11379d1a55b08102e8ec475d727f6513ebb467221aa570197230f2ff805
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5907c9e5d6c9ab90912d0b73fc5736adc9ff1e04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2709 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisreal.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atisrealweatheralls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantagescpay.aurore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-ip.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas-temp.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conseiller-espace-retraite.mondemain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consult-cptes-c01-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consult-cptes-c02-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consult-cptes-c03-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consult-cptes-c04-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content-tech-qual.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebiz.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erecord.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-retraite.mondemain.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join-us.personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mabanque.mondemain.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom-fr.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moneycredit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-tpecible.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'slow-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tecnici.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'val.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'viewpoint.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-c2-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assurance-credit.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisreal.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atisrealweatheralls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantagescpay.aurore.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-ip.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consult-cptes-c01-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consult-cptes-c02-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consult-cptes-c03-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consult-cptes-c04-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ebiz.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.join-us.personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.moneycredit.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rcs.co.bw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recette-tpecible.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tecnici.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.val.stimare.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.viewpoint.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-c1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-c2-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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