OV SSL/TLS Certificate for bnp07s.bnpparibas.com Issued to BNP PARIBAS SA

Certificate is witin its validity period

Issued by DigiCert Inc (DigiCert Global G3 TLS ECC SHA384 2020 CA1)

About the bnp07s.bnpparibas.com OV SSL/TLS Certificate

This certificate with serial number 0e:3e:96:43:35:74:82:a8:49:a6:f2:c8:19:9b:a8:34 for bnp07s.bnpparibas.com was issued on by DigiCert Inc.

With 97 subject alternative names, this certificate can be used to secure multiple FQDNs. This OV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this OV SSL/TLS Certificate review for bnp07s.bnpparibas.com provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DigiCert Inc

Organization: DigiCert Inc
Country: US

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 0e:3e:96:43:35:74:82:a8:49:a6:f2:c8:19:9b:a8:34
Serial Number (int): 18934162032488975667505959687375530036
Serial Number Length: 124 bits, 16 octets

Subject Key Identifier: 22:ff:e1:c5:78:b8:81:ef:72:22:23:c0:31:03:5e:46:e9:f1:c0:03
Authority Key Identifier: 8a:23:eb:9e:6b:d7:f9:37:5d:f9:6d:21:39:76:9a:a1:67:de:10:a8

Fingerprint (SHA-1): 76:ec:2e:7d:3a:90:10:a2:fe:64:e5:ac:a0:3a:f8:f0:c9:39:3b:7b
Fingerprint (SHA-256): d8:be:6b:8e:d9:ab:d8:46:7b:8a:9d:e2:51:af:bc:cb:0d:67:a8:09:0b:00:31:6b:e6:54:0f:8f:d6:59:c4:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt

Revocation Information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl

Check the revocation status for certificate bnp07s.bnpparibas.com
97
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for bnp07s.bnpparibas.com

Public Key Algorithm
ECDSA
Key Size
256
Signature Algorithm
ECDSA with SHA384
Key Usage
Digital Signature
Key Agreement
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

bnp07s.bnpparibas.com
api.primebroker.com
assinaturadigital-staging.bnpparibas.com.br
authservices.smsps.bnl.it
auto.cetelem.es
bcef.devportal.staging.bnpparibas
bnpparibas-pb.primebroker.com
bnpparibas.com.ar
bnpparibas.com.br
bnpparibas.primebroker.com
cetelem.es
cib-rum-dynatemea.bnpparibas.com
cib-syn-dynatemea.bnpparibas.com
cib.bnpparibasfortis.com
commatel-ppd.bnpparibas-am.it
commatel.bnpparibas-am.it
connexisach.americas.bnpparibas.com
consors.de
consorsbank.de
cortalconsors.de
cpb.bnpparibasfortis.be
csost-staging.bnpparibas-am.it
cxt-uat.bnpparibas.com
disclosures.bnpparibasfortis.com
eft-web.cib.bnpparibas.com
france-titrisation.com
france-titrisation.fr
fxpb.bnpparibas.com
gctabsreporting.bnpparibas.com
ib.bnpparibas.com.br
mbswl-uat.bnpparibas.com
mbswl.bnpparibas.com
monfisc-ppd.bnpparibas-am.it
monfisc.bnpparibas-am.it
pianopensione.bnl.it
portaldigital-staging.bnpparibas.com.br
postventaauto.cetelem.es
primebroker.com
primebrokerage.com
private-equity.bnpparibasfortis.be
privatebanking-u1.bnpparibas.de
privatebanking.bnpparibas.de
redirect.bnpparibas.de
saggio-ppd.bnpparibas-am.it
saggio.bnpparibas-am.it
securitiescorp.bnpparibas.com
securitiesservices.bnpparibas.com.br
securitiesservices.staging.bnpparibas.com
serviciosweb.cetelem.es
sso.wearetennis.bnpparibas
staging.primebroker.com
stgapi.primebroker.com
stgbnpparibas-pb.primebroker.com
stgbnpparibas.primebroker.com
stgges-pb.bnpparibas.com
stgmonitor.primebroker.com
sustainablebusiness.bnpparibasfortis.be
u0.consorsbank.de
u1.consorsbank.de
usissuingandpaying.staging.bnpparibas.com
wealthmanagement.bnpparibas.de
wissen-stage.consorsbank.de
workingcapital.bnpparibasfortis.be
www.auto.cetelem.es
www.bnpparibas.com.ar
www.bnpparibas.com.br
www.cetelem.es
www.cib.bnpparibasfortis.com
www.commatel-ppd.bnpparibas-am.it
www.commatel.bnpparibas-am.it
www.connexisach.americas.bnpparibas.com
www.consors.de
www.consorsbank.de
www.cortalconsors.de
www.cpb.bnpparibasfortis.be
www.csost-staging.bnpparibas-am.it
www.cxt-uat.bnpparibas.com
www.disclosures.bnpparibasfortis.com
www.france-titrisation.com
www.france-titrisation.fr
www.monfisc-ppd.bnpparibas-am.it
www.monfisc.bnpparibas-am.it
www.pianopensione.bnl.it
www.postventaauto.cetelem.es
www.primebroker.com
www.primebrokerage.com
www.private-equity.bnpparibasfortis.be
www.privatebanking.bnpparibas.de
www.saggio-ppd.bnpparibas-am.it
www.saggio.bnpparibas-am.it
www.serviciosweb.cetelem.es
www.staging.primebroker.com
www.sustainablebusiness.bnpparibasfortis.be
www.wealthmanagement.bnpparibas.de
www.workingcapital.bnpparibasfortis.be
www.zonacliente.cetelem.es
zonacliente.cetelem.es

X.509 Certificate

The complete raw X.509 certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQFzCCD52gAwIBAgIQDj6WQzV0gqhJpvLIGZuoNDAKBggqhkjOPQQDAzBZMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypEaWdp
Q2VydCBHbG9iYWwgRzMgVExTIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjUwNjAy
MDAwMDAwWhcNMjYwMTA5MjM1OTU5WjBzMQswCQYDVQQGEwJGUjEXMBUGA1UECAwO
w45sZS1kZS1GcmFuY2UxEjAQBgNVBAcTCU1PTlRSRVVJTDEXMBUGA1UEChMOQk5Q
IFBBUklCQVMgU0ExHjAcBgNVBAMTFWJucDA3cy5ibnBwYXJpYmFzLmNvbTBZMBMG
ByqGSM49AgEGCCqGSM49AwEHA0IABM2a/hw2EwSf+kqA3TqaozSjvOtL4oKMc+P2
okzhHaWtgp6tszEo8amJ2qLXqS122T18DZBYreEt4o8sMTK18kKjgg4rMIIOJzAf
BgNVHSMEGDAWgBSKI+uea9f5N135bSE5dpqhZ94QqDAdBgNVHQ4EFgQUIv/hxXi4
ge9yIiPAMQNeRunxwAMwggq5BgNVHREEggqwMIIKrIIVYm5wMDdzLmJucHBhcmli
YXMuY29tghNhcGkucHJpbWVicm9rZXIuY29tgithc3NpbmF0dXJhZGlnaXRhbC1z
dGFnaW5nLmJucHBhcmliYXMuY29tLmJyghlhdXRoc2VydmljZXMuc21zcHMuYm5s
Lml0gg9hdXRvLmNldGVsZW0uZXOCIWJjZWYuZGV2cG9ydGFsLnN0YWdpbmcuYm5w
cGFyaWJhc4IdYm5wcGFyaWJhcy1wYi5wcmltZWJyb2tlci5jb22CEWJucHBhcmli
YXMuY29tLmFyghFibnBwYXJpYmFzLmNvbS5icoIaYm5wcGFyaWJhcy5wcmltZWJy
b2tlci5jb22CCmNldGVsZW0uZXOCIGNpYi1ydW0tZHluYXRlbWVhLmJucHBhcmli
YXMuY29tgiBjaWItc3luLWR5bmF0ZW1lYS5ibnBwYXJpYmFzLmNvbYIYY2liLmJu
cHBhcmliYXNmb3J0aXMuY29tgh1jb21tYXRlbC1wcGQuYm5wcGFyaWJhcy1hbS5p
dIIZY29tbWF0ZWwuYm5wcGFyaWJhcy1hbS5pdIIjY29ubmV4aXNhY2guYW1lcmlj
YXMuYm5wcGFyaWJhcy5jb22CCmNvbnNvcnMuZGWCDmNvbnNvcnNiYW5rLmRlghBj
b3J0YWxjb25zb3JzLmRlghdjcGIuYm5wcGFyaWJhc2ZvcnRpcy5iZYIeY3Nvc3Qt
c3RhZ2luZy5ibnBwYXJpYmFzLWFtLml0ghZjeHQtdWF0LmJucHBhcmliYXMuY29t
giBkaXNjbG9zdXJlcy5ibnBwYXJpYmFzZm9ydGlzLmNvbYIaZWZ0LXdlYi5jaWIu
Ym5wcGFyaWJhcy5jb22CFmZyYW5jZS10aXRyaXNhdGlvbi5jb22CFWZyYW5jZS10
aXRyaXNhdGlvbi5mcoITZnhwYi5ibnBwYXJpYmFzLmNvbYIeZ2N0YWJzcmVwb3J0
aW5nLmJucHBhcmliYXMuY29tghRpYi5ibnBwYXJpYmFzLmNvbS5icoIYbWJzd2wt
dWF0LmJucHBhcmliYXMuY29tghRtYnN3bC5ibnBwYXJpYmFzLmNvbYIcbW9uZmlz
Yy1wcGQuYm5wcGFyaWJhcy1hbS5pdIIYbW9uZmlzYy5ibnBwYXJpYmFzLWFtLml0
ghRwaWFub3BlbnNpb25lLmJubC5pdIIncG9ydGFsZGlnaXRhbC1zdGFnaW5nLmJu
cHBhcmliYXMuY29tLmJyghhwb3N0dmVudGFhdXRvLmNldGVsZW0uZXOCD3ByaW1l
YnJva2VyLmNvbYIScHJpbWVicm9rZXJhZ2UuY29tgiJwcml2YXRlLWVxdWl0eS5i
bnBwYXJpYmFzZm9ydGlzLmJlgh9wcml2YXRlYmFua2luZy11MS5ibnBwYXJpYmFz
LmRlghxwcml2YXRlYmFua2luZy5ibnBwYXJpYmFzLmRlghZyZWRpcmVjdC5ibnBw
YXJpYmFzLmRlghtzYWdnaW8tcHBkLmJucHBhcmliYXMtYW0uaXSCF3NhZ2dpby5i
bnBwYXJpYmFzLWFtLml0gh1zZWN1cml0aWVzY29ycC5ibnBwYXJpYmFzLmNvbYIk
c2VjdXJpdGllc3NlcnZpY2VzLmJucHBhcmliYXMuY29tLmJygilzZWN1cml0aWVz
c2VydmljZXMuc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIXc2VydmljaW9zd2ViLmNl
dGVsZW0uZXOCGnNzby53ZWFyZXRlbm5pcy5ibnBwYXJpYmFzghdzdGFnaW5nLnBy
aW1lYnJva2VyLmNvbYIWc3RnYXBpLnByaW1lYnJva2VyLmNvbYIgc3RnYm5wcGFy
aWJhcy1wYi5wcmltZWJyb2tlci5jb22CHXN0Z2JucHBhcmliYXMucHJpbWVicm9r
ZXIuY29tghhzdGdnZXMtcGIuYm5wcGFyaWJhcy5jb22CGnN0Z21vbml0b3IucHJp
bWVicm9rZXIuY29tgidzdXN0YWluYWJsZWJ1c2luZXNzLmJucHBhcmliYXNmb3J0
aXMuYmWCEXUwLmNvbnNvcnNiYW5rLmRlghF1MS5jb25zb3JzYmFuay5kZYIpdXNp
c3N1aW5nYW5kcGF5aW5nLnN0YWdpbmcuYm5wcGFyaWJhcy5jb22CHndlYWx0aG1h
bmFnZW1lbnQuYm5wcGFyaWJhcy5kZYIbd2lzc2VuLXN0YWdlLmNvbnNvcnNiYW5r
LmRlgiJ3b3JraW5nY2FwaXRhbC5ibnBwYXJpYmFzZm9ydGlzLmJlghN3d3cuYXV0
by5jZXRlbGVtLmVzghV3d3cuYm5wcGFyaWJhcy5jb20uYXKCFXd3dy5ibnBwYXJp
YmFzLmNvbS5icoIOd3d3LmNldGVsZW0uZXOCHHd3dy5jaWIuYm5wcGFyaWJhc2Zv
cnRpcy5jb22CIXd3dy5jb21tYXRlbC1wcGQuYm5wcGFyaWJhcy1hbS5pdIIdd3d3
LmNvbW1hdGVsLmJucHBhcmliYXMtYW0uaXSCJ3d3dy5jb25uZXhpc2FjaC5hbWVy
aWNhcy5ibnBwYXJpYmFzLmNvbYIOd3d3LmNvbnNvcnMuZGWCEnd3dy5jb25zb3Jz
YmFuay5kZYIUd3d3LmNvcnRhbGNvbnNvcnMuZGWCG3d3dy5jcGIuYm5wcGFyaWJh
c2ZvcnRpcy5iZYIid3d3LmNzb3N0LXN0YWdpbmcuYm5wcGFyaWJhcy1hbS5pdIIa
d3d3LmN4dC11YXQuYm5wcGFyaWJhcy5jb22CJHd3dy5kaXNjbG9zdXJlcy5ibnBw
YXJpYmFzZm9ydGlzLmNvbYIad3d3LmZyYW5jZS10aXRyaXNhdGlvbi5jb22CGXd3
dy5mcmFuY2UtdGl0cmlzYXRpb24uZnKCIHd3dy5tb25maXNjLXBwZC5ibnBwYXJp
YmFzLWFtLml0ghx3d3cubW9uZmlzYy5ibnBwYXJpYmFzLWFtLml0ghh3d3cucGlh
bm9wZW5zaW9uZS5ibmwuaXSCHHd3dy5wb3N0dmVudGFhdXRvLmNldGVsZW0uZXOC
E3d3dy5wcmltZWJyb2tlci5jb22CFnd3dy5wcmltZWJyb2tlcmFnZS5jb22CJnd3
dy5wcml2YXRlLWVxdWl0eS5ibnBwYXJpYmFzZm9ydGlzLmJlgiB3d3cucHJpdmF0
ZWJhbmtpbmcuYm5wcGFyaWJhcy5kZYIfd3d3LnNhZ2dpby1wcGQuYm5wcGFyaWJh
cy1hbS5pdIIbd3d3LnNhZ2dpby5ibnBwYXJpYmFzLWFtLml0ght3d3cuc2Vydmlj
aW9zd2ViLmNldGVsZW0uZXOCG3d3dy5zdGFnaW5nLnByaW1lYnJva2VyLmNvbYIr
d3d3LnN1c3RhaW5hYmxlYnVzaW5lc3MuYm5wcGFyaWJhc2ZvcnRpcy5iZYIid3d3
LndlYWx0aG1hbmFnZW1lbnQuYm5wcGFyaWJhcy5kZYImd3d3LndvcmtpbmdjYXBp
dGFsLmJucHBhcmliYXNmb3J0aXMuYmWCGnd3dy56b25hY2xpZW50ZS5jZXRlbGVt
LmVzghZ6b25hY2xpZW50ZS5jZXRlbGVtLmVzMD4GA1UdIAQ3MDUwMwYGZ4EMAQIC
MCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNV
HQ8BAf8EBAMCA4gwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNV
HR8EgZcwgZQwSKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2Vy
dEdsb2JhbEczVExTRUNDU0hBMzg0MjAyMENBMS0yLmNybDBIoEagRIZCaHR0cDov
L2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNUTFNFQ0NTSEEzODQy
MDIwQ0ExLTIuY3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6
Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMu
ZGlnaWNlcnQuY29tL0RpZ2lDZXJ0R2xvYmFsRzNUTFNFQ0NTSEEzODQyMDIwQ0Ex
LTIuY3J0MAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2
AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABlzDEOX4AAAQDAEcw
RQIhAN7hbNLFyD8PknClEcew9T0el0dp9I8+Ddd1YZ5xxipqAiBEqh8d65FeLKoL
61EbJALeY2f+J52l/ZQapyupPIKPxQB1AGQRxGykEuyniRyiAi4AvKtPKAfUHjUn
q+r+1QPJfc3wAAABlzDEOTUAAAQDAEYwRAIgPcq/Tbyock5eOM3IFPStUqcKdOJe
+WWdCYHA05cguVMCIFGzSHPhy3np8ewi9lJBlgbm96IbnpylwN1PYSce2SJIAHYA
SZybad4dfOz8Nt7Nh2SmuFuvCoeAGdFVUvvp6ynd+MMAAAGXMMQ5RAAABAMARzBF
AiEAt4MiUFdcsriIgOc/CGwHV6pMftNAoMHh7SGCg1I+1BICIDjqRQ85ckTsaWn9
xfFCjlgPhPQunIrimppvc+Tf6tdKMAoGCCqGSM49BAMDA2gAMGUCMHSzU1w8uA51
V+rK7i29+UQqoef3KA8F+ywcBBeB/0c9bQbpRKUVYiSoU+KxI/nw8wIxAIubfge6
0eG2h8MvKOjHo9jochZ22dTsext2OB66FeaXqeo4Ra5lNfKzOk83fu4t3Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEzZr+HDYTBJ/6SoDdOpqjNKO860vi
goxz4/aiTOEdpa2Cnq2zMSjxqYnaotepLXbZPXwNkFit4S3ijywxMrXyQg==
-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18934162032488975667505959687375530036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G3 TLS ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-01-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004cd9afe1c3613049ffa4a80dd3a9aa334a3bceb4be2828c73e3f6a24ce11da5ad829eadb33128f1a989daa2d7a92d76d93d7c0d9058ade12de28f2c3132b5f242
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8a23eb9e6bd7f9375df96d2139769aa167de10a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22ffe1c578b881ef722223c031035e46e9f1c003
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2736 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaturadigital-staging.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcef.devportal.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib-rum-dynatemea.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib-syn-dynatemea.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commatel-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commatel.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortalconsors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpb.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csost-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxt-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'disclosures.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eft-web.cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monfisc-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monfisc.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldigital-staging.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private-equity.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking-u1.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redirect.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saggio-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saggio.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainablebusiness.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u0.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'u1.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usissuingandpaying.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wissen-stage.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'workingcapital.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cib.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commatel-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.commatel.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cortalconsors.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cpb.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csost-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cxt-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.disclosures.bnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monfisc-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monfisc.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebrokerage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.private-equity.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saggio-ppd.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saggio.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainablebusiness.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthmanagement.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.workingcapital.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG3TLSECCSHA3842020CA1-2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3
 . . . . [c:0|t:3|false] BIT STRING (824 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17961849448272057362450289780726379006307374818604851215663608425094395311746193774911712063183998660785712743969011
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21487544208911281779135019494117775115505972551180278168929330207150088438249907302745133383431322545266802062929373