f17aaabc20bfe045075927934fed52d21.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 03:f7:53:44:e7:cf:f7:da:64:cd:47:e4:b9:38:c5:d9 was issued on by DigiCert Inc.

With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:f7:53:44:e7:cf:f7:da:64:cd:47:e4:b9:38:c5:d9
Serial Number (int): 5271870210667459468144554564346496473
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: e2:0d:08:27:af:8e:dd:ab:ae:72:77:71:c5:19:14:d9:7f:a0:5a:85
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9e:a2:86:9c:cf:fe:ba:0e:cf:51:b0:8c:2d:8d:87:f1:d7:88:07:3c
Fingerprint (sha256): 0a:9a:ab:e0:9d:a6:2d:cb:57:df:7d:5c:d9:cb:54:9f:2a:31:53:90:3b:7a:c0:85:03:bb:19:47:81:ff:5a:a0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate f17aaabc20bfe045075927934fed52d21.bnpparibas.com

72

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.economic-research.bnpparibas.com
easybanking.qafintro.be
erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com
connexissupplychain.bnpparibas.com
research.bnpparibas.com
www.qabnpparibasfortis.com
associations.bnpparibas.com
bnpplink-uat1.bnpparibas.co.in
bnpparibasinvestindia.com
chronos.bnpparibas.com
www.associations.bnpparibas.fr
cdn-actus.bnpparibas.com
factor.bnpparibas.pt
www.cm-continuity.qual.bnpparibas.com
association.bnpparibas.com
www.arvaljiutong.cn
www.eqd.bnpparibas.com
webprive.epargne-entreprise.staging.bnpparibas.com
pewee-uat.bnpparibas.com
eqresearch.bnpparibas.com
www.associations.bnpparibas.com
arvaljiutong.cn
www.arval.cn
netpaycentric-india.bnpparibas.com
arval.cn
www.association.bnpparibas.fr
www.association.bnpparibas.com
hcepaylib.bnpparibas.net
www.eqd-globalmarkets.bnpparibas.com
www.bnpparibasinvestindia.com
www.bnpplink.bnpparibas.co.in
www.chronos.bnpparibas.com
www.custexfactory.bnpparibascardif.com
connexisdirect.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
vcli.vn
fundquestadvisor-com.staging.bnpparibas-ip.com
association.bnpparibas.fr
edraft.uat1.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
arbitrage.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
w.staging.bnpparibas.net
pewee.bnpparibas.com
cm-continuity.bnpparibas.com
eware.uat1.bnpparibas.com
edraft.bnpparibas.com
cm-continuity.qual.bnpparibas.com
eware.bnpparibas.com
connexistradebg.uat1.bnpparibas.com
w.bnpparibas.net
qabnpparibasfortis.com
wwwcoll.hellobank.it
mobile-secure-pvm.bnpparibas.net
associations.bnpparibas.fr
phonebook.bnlmobile.it
prefactor.bnpparibas.com
custexfactory.bnpparibascardif.com
devfactor.bnpparibas.com
associationsetfondations.bnpparibas.fr
wwwcollnew.hellobank.it
www.cm-continuity.bnpparibas.com
economic-research.bnpparibas.com
www.easybanking.qafintro.be
ecodico.bnpparibas.com
ereporting.asia.bnpparibas.com
mon-assistance-entreprise.bnpparibas
optimisermon.epargne-retraite-entreprises.bnpparibas.com
ws-sf-factor.bnpparibas.com
india-netpay.bnpparibas.com
connexissupplychain.id.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPVTCCDj2gAwIBAgIQA/dTROfP99pkzUfkuTjF2TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTgwNTE1MDAwMDAwWhcN
MTkxMjAyMTIwMDAwWjCBjTELMAkGA1UEBhMCRlIxFjAUBgNVBAgTDUlsZSBkZSBG
cmFuY2UxEjAQBgNVBAcTCU1PTlRSRVVJTDEXMBUGA1UEChMOQk5QIFBBUklCQVMg
U0ExOTA3BgNVBAMTMGYxN2FhYWJjMjBiZmUwNDUwNzU5Mjc5MzRmZWQ1MmQyMS5i
bnBwYXJpYmFzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKyo
WLy/pnVBE2CU73Qpkj1lGqcxh6kEMpEDQEF+FjJX09gPEZFz1kacHbjEJYO8IyVK
eYRi1umE1nSDWst5w+0K6BueWRfJVn/bxeV37IFEiJcgsnOUPJrQGqUIa38eGVXq
RjdFC5FBgkxzy94nE9VRAkRwpHXAEhA0ukP0kS9HTCXiGFYqY5nEGyONKoFFNAO4
0tScXxHpFnrA1kCvF5+r7WbTKReAlpkRGGmJYHnhFJd77nPMKRDYF3gHhZNTIaS0
HMIjllyy2yRN77jU+udYbAAeCBGCZ0BiwNV5JyZjdxhy9uDS+OOlkun1dzXLgQRL
YT+WzCIUyHk/I4G7+Y8CAwEAAaOCC+4wggvqMB8GA1UdIwQYMBaAFA+AYRyCMWHV
LyjnjUY4tCzhxtniMB0GA1UdDgQWBBTiDQgnr47dq65yd3HFGRTZf6BahTCCCK4G
A1UdEQSCCKUwggihgjBmMTdhYWFiYzIwYmZlMDQ1MDc1OTI3OTM0ZmVkNTJkMjEu
Ym5wcGFyaWJhcy5jb22CJHd3dy5lY29ub21pYy1yZXNlYXJjaC5ibnBwYXJpYmFz
LmNvbYIXZWFzeWJhbmtpbmcucWFmaW50cm8uYmWCTGVyZWxpby1lcGFyZ25lLXJl
dHJhaXRlLWVudHJlcHJpc2VzLWJucHBhcmliYXMtY29tLnN0YWdpbmcuYm5wcGFy
aWJhcy1pcC5jb22CImNvbm5leGlzc3VwcGx5Y2hhaW4uYm5wcGFyaWJhcy5jb22C
F3Jlc2VhcmNoLmJucHBhcmliYXMuY29tghp3d3cucWFibnBwYXJpYmFzZm9ydGlz
LmNvbYIbYXNzb2NpYXRpb25zLmJucHBhcmliYXMuY29tgh5ibnBwbGluay11YXQx
LmJucHBhcmliYXMuY28uaW6CGWJucHBhcmliYXNpbnZlc3RpbmRpYS5jb22CFmNo
cm9ub3MuYm5wcGFyaWJhcy5jb22CHnd3dy5hc3NvY2lhdGlvbnMuYm5wcGFyaWJh
cy5mcoIYY2RuLWFjdHVzLmJucHBhcmliYXMuY29tghRmYWN0b3IuYm5wcGFyaWJh
cy5wdIIld3d3LmNtLWNvbnRpbnVpdHkucXVhbC5ibnBwYXJpYmFzLmNvbYIaYXNz
b2NpYXRpb24uYm5wcGFyaWJhcy5jb22CE3d3dy5hcnZhbGppdXRvbmcuY26CFnd3
dy5lcWQuYm5wcGFyaWJhcy5jb22CMndlYnByaXZlLmVwYXJnbmUtZW50cmVwcmlz
ZS5zdGFnaW5nLmJucHBhcmliYXMuY29tghhwZXdlZS11YXQuYm5wcGFyaWJhcy5j
b22CGWVxcmVzZWFyY2guYm5wcGFyaWJhcy5jb22CH3d3dy5hc3NvY2lhdGlvbnMu
Ym5wcGFyaWJhcy5jb22CD2FydmFsaml1dG9uZy5jboIMd3d3LmFydmFsLmNugiJu
ZXRwYXljZW50cmljLWluZGlhLmJucHBhcmliYXMuY29tgghhcnZhbC5jboIdd3d3
LmFzc29jaWF0aW9uLmJucHBhcmliYXMuZnKCHnd3dy5hc3NvY2lhdGlvbi5ibnBw
YXJpYmFzLmNvbYIYaGNlcGF5bGliLmJucHBhcmliYXMubmV0giR3d3cuZXFkLWds
b2JhbG1hcmtldHMuYm5wcGFyaWJhcy5jb22CHXd3dy5ibnBwYXJpYmFzaW52ZXN0
aW5kaWEuY29tgh13d3cuYm5wcGxpbmsuYm5wcGFyaWJhcy5jby5pboIad3d3LmNo
cm9ub3MuYm5wcGFyaWJhcy5jb22CJnd3dy5jdXN0ZXhmYWN0b3J5LmJucHBhcmli
YXNjYXJkaWYuY29tgh1jb25uZXhpc2RpcmVjdC5ibnBwYXJpYmFzLmNvbYInY29u
bmV4aXNzdXBwbHljaGFpbi51YXQxLmJucHBhcmliYXMuY29tggd2Y2xpLnZugi5m
dW5kcXVlc3RhZHZpc29yLWNvbS5zdGFnaW5nLmJucHBhcmliYXMtaXAuY29tghlh
c3NvY2lhdGlvbi5ibnBwYXJpYmFzLmZyghplZHJhZnQudWF0MS5ibnBwYXJpYmFz
LmNvbYIkZXJlY2VpcHQyY2VudHJpYy5hc2lhLmJucHBhcmliYXMuY29tghhhcmJp
dHJhZ2UuYm5wcGFyaWJhcy5jb22CIGVxZC1nbG9iYWxtYXJrZXRzLmJucHBhcmli
YXMuY29tghh3LnN0YWdpbmcuYm5wcGFyaWJhcy5uZXSCFHBld2VlLmJucHBhcmli
YXMuY29tghxjbS1jb250aW51aXR5LmJucHBhcmliYXMuY29tghlld2FyZS51YXQx
LmJucHBhcmliYXMuY29tghVlZHJhZnQuYm5wcGFyaWJhcy5jb22CIWNtLWNvbnRp
bnVpdHkucXVhbC5ibnBwYXJpYmFzLmNvbYIUZXdhcmUuYm5wcGFyaWJhcy5jb22C
I2Nvbm5leGlzdHJhZGViZy51YXQxLmJucHBhcmliYXMuY29tghB3LmJucHBhcmli
YXMubmV0ghZxYWJucHBhcmliYXNmb3J0aXMuY29tghR3d3djb2xsLmhlbGxvYmFu
ay5pdIIgbW9iaWxlLXNlY3VyZS1wdm0uYm5wcGFyaWJhcy5uZXSCGmFzc29jaWF0
aW9ucy5ibnBwYXJpYmFzLmZyghZwaG9uZWJvb2suYm5sbW9iaWxlLml0ghhwcmVm
YWN0b3IuYm5wcGFyaWJhcy5jb22CImN1c3RleGZhY3RvcnkuYm5wcGFyaWJhc2Nh
cmRpZi5jb22CGGRldmZhY3Rvci5ibnBwYXJpYmFzLmNvbYImYXNzb2NpYXRpb25z
ZXRmb25kYXRpb25zLmJucHBhcmliYXMuZnKCF3d3d2NvbGxuZXcuaGVsbG9iYW5r
Lml0giB3d3cuY20tY29udGludWl0eS5ibnBwYXJpYmFzLmNvbYIgZWNvbm9taWMt
cmVzZWFyY2guYm5wcGFyaWJhcy5jb22CG3d3dy5lYXN5YmFua2luZy5xYWZpbnRy
by5iZYIWZWNvZGljby5ibnBwYXJpYmFzLmNvbYIeZXJlcG9ydGluZy5hc2lhLmJu
cHBhcmliYXMuY29tgiRtb24tYXNzaXN0YW5jZS1lbnRyZXByaXNlLmJucHBhcmli
YXOCOG9wdGltaXNlcm1vbi5lcGFyZ25lLXJldHJhaXRlLWVudHJlcHJpc2VzLmJu
cHBhcmliYXMuY29tght3cy1zZi1mYWN0b3IuYm5wcGFyaWJhcy5jb22CG2luZGlh
LW5ldHBheS5ibnBwYXJpYmFzLmNvbYIlY29ubmV4aXNzdXBwbHljaGFpbi5pZC5i
bnBwYXJpYmFzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2lj
ZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdp
Y2VydC5jb20vc3NjYS1zaGEyLWc2LmNybDBMBgNVHSAERTBDMDcGCWCGSAGG/WwB
ATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMAgG
BmeBDAECAjB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAA
MIIBgQYKKwYBBAHWeQIEAgSCAXEEggFtAWsAdwCkuQmQtBhYFIe7E6LMZ3AKPDWY
BPkb37jjd80OyA3cEAAAAWNkTJyOAAAEAwBIMEYCIQC5uBPDyUYyJey9oJEmjuIG
8FUTwnwceA+gf6lR6dWW2QIhAKh46e3yFRv6qscrwmpD3de3e8JgbvlSY+pj3Tnm
1dhWAHcAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFjZEyeZgAA
BAMASDBGAiEAx3ik2OvyCKiAARl1bZbrgxE3XjpBEsw42KykT3ahQZsCIQC3suHb
gR6bi1GxB6G8s15HSurQz8n7IcRkeKkz0I5/TAB3ALvZ37wfinG1k5Qjl6qSe0c4
V5UKq1LoGpCWZDaOHtGFAAABY2RMnNIAAAQDAEgwRgIhAOqq06ox1yIfzkX41DVG
8BgvXxd0zxNLraiGbR+1B2HqAiEAu9p35VZBRl1AHE0WYGNzx8SucjsV1N7Fn5u9
pR6YHoowDQYJKoZIhvcNAQELBQADggEBAKkL5ONfMMlOldaiJbiaLzYQT4doprUj
Ex6NUVJktZ3lNpbB/L5aPpLemQAJOm/5kcgG6/ShKzcI6RGMrC3AC9pXSmRWzs8h
QeVA2sL7PMUgHRCak6cDI6iRN74eUBfVSDV42fUPfR8TOjXcQfIfynYFyIumpWPZ
tsn/3kvSHVEaksLwAIPrTPlfgcbVU6gxqwS2XeMMzfIpxcOlTXUGyZ2rqkRDAchg
9IFrlfDWXWivHJOupwyljkrmNGgPftgi2P4Kk+fNa4wZO3qZ28VADg9jhoq1ZTe2
bHHx99zKWNbXsbvEkId/SEy5i6X3UJeT58idT/D7KVqw8hhNZbTw4yo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKhYvL+mdUETYJTvdCmS
PWUapzGHqQQykQNAQX4WMlfT2A8RkXPWRpwduMQlg7wjJUp5hGLW6YTWdINay3nD
7QroG55ZF8lWf9vF5XfsgUSIlyCyc5Q8mtAapQhrfx4ZVepGN0ULkUGCTHPL3icT
1VECRHCkdcASEDS6Q/SRL0dMJeIYVipjmcQbI40qgUU0A7jS1JxfEekWesDWQK8X
n6vtZtMpF4CWmREYaYlgeeEUl3vuc8wpENgXeAeFk1MhpLQcwiOWXLLbJE3vuNT6
51hsAB4IEYJnQGLA1XknJmN3GHL24NL446WS6fV3NcuBBEthP5bMIhTIeT8jgbv5
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5271870210667459468144554564346496473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21796003271456966868489026129728788005801226300359541325397404590181663240958187179084482433652763621936733140508628086245914569298862451438677422936487335981801360869980347870765782174465542637851589594506260138414160721115894214060026478859745552130840992711925508023591265490910595983018621098795738511003112079417884575708591750175775642549054664501284751289693714076139304396371127022818361199577060159160616789120691641545546985019323754407638252227038826515457845655942389086392897170059482150290553757431149450677571880652234861693009112841767531326525409067338502066151974389671487916028275128379876042340751
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e20d0827af8eddabae727771c51914d97fa05a85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2213 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easybanking.qafintro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio-epargne-retraite-entreprises-bnpparibas-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexissupplychain.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associations.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpplink-uat1.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibasinvestindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chronos.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.associations.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-actus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm-continuity.qual.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'association.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webprive.epargne-entreprise.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqresearch.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.associations.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpaycentric-india.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.association.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.association.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hcepaylib.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqd-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasinvestindia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpplink.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chronos.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisdirect.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexissupplychain.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcli.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'association.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqd-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm-continuity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cm-continuity.qual.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistradebg.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcoll.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-secure-pvm.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associations.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phonebook.bnlmobile.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prefactor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devfactor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'associationsetfondations.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cm-continuity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easybanking.qafintro.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecodico.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-assistance-entreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisermon.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-sf-factor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-netpay.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexissupplychain.id.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (369 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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