www.warrants.com

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 77:2b:73:df:7a:30:70:d5:81:56:c3:56:f3:91:41:98:d2:41:8a:a6 was issued on by QuoVadis Limited.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Organization unit: 552120222
State / Province: IIe-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 77:2b:73:df:7a:30:70:d5:81:56:c3:56:f3:91:41:98:d2:41:8a:a6
Serial Number (int): 680338927729841030256943960523364530940228504230
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 27:53:15:bc:a6:4c:4b:4d:cc:ee:6c:8d:0e:86:93:59:c4:e0:78:ff
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 19:50:9e:f2:fa:7b:97:ab:5f:a0:6d:15:10:1c:30:2c:d0:34:e4:ca
Fingerprint (sha256): 09:cb:14:fc:87:f1:6d:0e:f0:55:1d:d0:a7:87:9c:98:25:5b:56:4e:88:c0:78:26:1e:d6:26:9a:43:df:c8:1d

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate www.warrants.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.warrants.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.warrants.com
www.creditlinkednotes.sgcib.co.uk
testtrade-fr.warrants.com
se.warrants.com
es.warrants.com
deai-notes.com
surveys-fr.warrants.com
super10s.co.uk
vega.bonusobligation.se
www.certificate.it
de.warrants.com
ch.solutions.sgcib.com
cortal-be.warrants.com
www.adequity.de
sgbolsa.es
www.sgbeurs.nl
mobile-it.warrants.com
listedproducts.societegenerale.fi
msci.bonusobligation.se
www.adequity.co.uk
indiachina.bonusobligation.se
beta.sg-gfs.com
partners-uk.warrants.com
flash-fr.warrants.com
solutions.sgcib.com
issues-fr.warrants.com
pt.warrants.com
sgbeurs.nl
www.adequity.nl
es.solutions.sgcib.com
etp.societegenerale.co.uk
bonds.societegenerale.it
cortal-fr.warrants.com
alphainfo.sgcib.com
legrand.structured-investments.com
www.adequity.fr
www.clubwip.com
it.warrants.com
latam.sgamericas.com
prodotti.societegenerale.it
adequity.fr
sgi.sgmarkets.com
sglistedproducts.co.uk
www.adequity.es
smart-passage-sg.com
www.adequity.com
surveys-fr.adequity.com
avanza-se.warrants.com
sgcib-cnppatrimoine.fr
euronext-fr.sgcertificats.com
home.warrants.com
mobile-es.warrants.com
www.corridor.it
test.bolsa.societegenerale.es
alphametals.sgcib.com
beurs.societegenerale.nl
fr.solutions.sgcib.com
varlden4.bonusobligation.se
swapdisclosure.sgcib.com
new.sgbourse.fr
testtrade-uk.warrants.com
eqonline-fi.warrants.com
fr.warrants.com
listedproducts.societegenerale.se
testtrade-it.warrants.com
test.sgbourse.fr
testtrade-es.warrants.com
lyxoretf.pl
lyxoretf.com.sg
boursier.sgbourse.fr
us.sgamericas.com
ww2.sgcib.com
it.solutions.sgcib.com
at.solutions.sgcib.com
corridor.it
demo.dps-link.com
www.alphametals.sgcib.com
www.clickoptions.fr
www.adequity.at
usprogram.socgen.com
sgbourse.fr
swing.bonusobligation.se
bolsa.societegenerale.es
surveys.lyxoretf.de
partners.adequity.nl
www.adequity.be
lyxoretf.com
ariva-de.warrants.com
socgen.ch
www.alphainfo.sgcib.com
www.smart-passage-sg.com
boursorama.clubwip.com
uk.solutions.sgcib.com
chstrategies.sgmarkets.com
boursorama-fr.warrants.com
de.solutions.sgcib.com
sgsp.sgamericas.com
etc.societegenerale.it
www.adequity.it
www.bonusobligation.se

Other certificates including the domain name warrants.com

(limited to 100 certificates)
*.warrants.com
warrant.com
*.warrants.com
www.warrants.com
www.societegenerale.fi
www.warrants.com
hk.warrants.com
www.solutions.sgcib.com
listedstructuredproducts.com
cortal-fr.warrants.com
listedstructuredproducts.com
www.warrants.com
alpha.sgcib.com
www.solutions.sgcib.com
www.warrants.com
tw.warrants.com
www.warrants.com
*.warrants.com
www.warrants.com
www.warrants.com
www.warrants.com
www.warrants.com
warrants.com
www.warrants.com
warrants.com
www.warrants.com
www.solutions.sgcib.com
hk.warrants.com
www.societegenerale.fi
www.societegenerale.fi
warrants.com
tw.warrants.com
www.solutions.sgcib.com
www.warrants.com
www.solutions.sgcib.com
boursorama-fr.warrants.com
hk.warrants.com
warrant.com
www.solutions.sgcib.com
www.solutions.sgcib.com
www.societegenerale.fi
hk.warrants.com
warrants.com
*.warrants.com
www.solutions.sgcib.com
alpha.sgcib.com
warrants.com
hk.warrants.com
www.solutions.sgcib.com
*.warrants.com
hk.warrants.com
www.solutions.sgcib.com
www.solutions.sgcib.com
www.societegenerale.fi
www.warrants.com
www.warrants.com
hk.warrants.com
hk.warrants.com
www.solutions.sgcib.com
www.warrants.com
www.warrants.com
www.societegenerale.fi
www.solutions.sgcib.com
www.solutions.sgcib.com
www.warrants.com
www.warrants.com
cortal-be.warrants.com
www.solutions.sgcib.com
sg.warrants.com
es.warrants.com
hk.warrants.com
sg.warrants.com
hk.warrants.com
www.warrants.com
www.solutions.sgcib.com
hk.warrants.com
www.warrants.com
www.solutions.sgcib.com
*.warrants.com
es.warrants.com
sg.warrants.com
hk.warrants.com
www.warrants.com

Certificate

The complete raw certificate details for www.warrants.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztIjGGf/sAmKDm4FyE9c
/10wnFMlCnt/MFUOzDvEusSXyy89CdsuEZ/axG9lstSk6YbqJ+pk8JrqXZgVEJLn
cIygkc2Yv9bWvO4/SrZGz6FG8bMA8fkpO/awZ9wZHyHUnqCaA5+4yWPb/2+njFET
/TJ+i8yARQQj+1FkOBvRe1vUYdY2+D2bHIpX6Lg6or4dt3lMO/lEc7wfyhrhJUiX
ddET5496+ekAP5xxVSrx4AU8znJD0+rfyzUIVQ6J6EKaJbmTsyLOGAkO1vU9IcOT
W3JbarnI4J2u+fM/MJnJbdjqvXMcD2kOFWwwAG1tmvOXF5S/TCw2HOmX0ipigQb7
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 680338927729841030256943960523364530940228504230
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 15:10:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-05 15:20:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IIe-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '552120222'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.warrants.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26108713284720985202999839940227959422701143521743061857100541358513010148539076001724705072497544927841701160225054675252108646620867076347003417789969086394198676141687614664371665131013481620881933725936700466380011881542617205137601636587410178988687552126390934356388278906489679700451068393893150126540293314305696903533176764499584116932600535728353964764692193479678168702325480869996601907050949904545112836589020025530741839275909938105000477620807004439111825960665555793672823318500680901665756326523200900112292076533269695197418863481213604372272178159774538582960471294978075969689054836430166947199981
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2203 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditlinkednotes.sgcib.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testtrade-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'se.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'deai-notes.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'super10s.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vega.bonusobligation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.certificate.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ch.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortal-be.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgbolsa.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sgbeurs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-it.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listedproducts.societegenerale.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'msci.bonusobligation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indiachina.bonusobligation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta.sg-gfs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-uk.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flash-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'issues-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgbeurs.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etp.societegenerale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bonds.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortal-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphainfo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legrand.structured-investments.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clubwip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'latam.sgamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodotti.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adequity.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgi.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sglistedproducts.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smart-passage-sg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys-fr.adequity.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avanza-se.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgcib-cnppatrimoine.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euronext-fr.sgcertificats.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'home.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-es.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.corridor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.bolsa.societegenerale.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alphametals.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beurs.societegenerale.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varlden4.bonusobligation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swapdisclosure.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.sgbourse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testtrade-uk.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqonline-fi.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'listedproducts.societegenerale.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testtrade-it.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.sgbourse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testtrade-es.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyxoretf.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyxoretf.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boursier.sgbourse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.sgamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corridor.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.dps-link.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphametals.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clickoptions.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usprogram.socgen.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgbourse.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'swing.bonusobligation.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bolsa.societegenerale.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.lyxoretf.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.adequity.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyxoretf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ariva-de.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'socgen.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.alphainfo.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smart-passage-sg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boursorama.clubwip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chstrategies.sgmarkets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boursorama-fr.warrants.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.solutions.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgsp.sgamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etc.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.adequity.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bonusobligation.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							275315bca64c4b4dccee6c8d0e869359c4e078ff
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		00cf4a1313c249cb2a8e9ee183a0a67c990153cb7c9e9b98ef257d13b7e1d3d9778cc0282fadda0833d37798978b5252821dab5dbd077f7e88bca61225d95a44ee6f7be88fe7af9b7371570a024b91ceb947c49151d880463fe8d48de7f013abc2ae8274ac36df5b796fd49cdb3c26d027182ed960421ee42cbb7043649430b48b459a86b97ff05cadbc8413abb905466a096c7844a9c9e29692a9ac8f7c3f64041f6c1c21211d0c9b0efa2e58e0f34b836e976b30e7c3d7e7ce39a393a92728e65aa6eecb2ee15fb7f91eafc0490bf2fc7ac1798e8446f9b89f46969a50fb19bdbece42bf99d3a76cc5c6c6ae674212c36d92dee28605f79b00d7d9f80618b5bd96e2fa4fb5bec81939b3317248d753ff6d9449f618dbfada67fe95543a5125d92f6b340601c96c37042cce7e8427be2029b5195be6b590658b5c346d26af2538f48c6c3f5837b20fef64edbafc7800a002ce94f3bca3222ec00e08c2d9824ecc678c41f7078179ee734ac08fae3256387a771d8b5c03e41ed57b7ec3755bc99d2ce9a496c45e117d731cb58968346075057c6cf457745cc4182aa7390a877c1635852b6fdc287b5a838814a6e92e4a89e3ff01244662f62e718357fe34202b81cccf424318a4e49694951b94a9157e967b92b6bcdf3f6efe1725e5fccefc5425d4386ee741d04433dcbeb4b463fd6f2be90c0cdfdaade3bd692927ec61392b3e