bnp11s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:27:14:74:9b:2f:17:2a:a5:f1:66:fe:96:af:52:6a was issued on by DigiCert Inc.

With 96 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:27:14:74:9b:2f:17:2a:a5:f1:66:fe:96:af:52:6a
Serial Number (int): 20141334400942626496121617107643224682
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 68:98:1d:7a:44:c1:2f:04:44:05:ba:d7:3b:ef:ba:84:ac:db:33:36
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 01:30:51:5c:43:23:f0:1d:67:fb:9b:63:ee:35:73:07:b4:63:1e:40
Fingerprint (sha256): 0e:18:ee:3d:63:57:66:fd:a4:fa:69:7d:cc:3d:c9:19:37:99:64:bd:6e:7d:d9:70:78:e2:92:d6:46:53:9e:05

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp11s.bnpparibas.com

96

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp11s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp11s.bnpparibas.com
acquista-online-coll.bnl.it
acquista-online.bnl.it
advisorycoll.staging.artigiancassa.it
agcbe.isf.bnpparibas-pf.com
agcde.isf.bnpparibas-pf.com
agces.isf.bnpparibas-pf.com
agcit.isf.bnpparibas-pf.com
agcmx.isf.bnpparibas-pf.com
agcnl.isf.bnpparibas-pf.com
agcpl.isf.bnpparibas-pf.com
agcpt.isf.bnpparibas-pf.com
arvalreferrals.arval.com
arvalreferrals.pre.arval.com
arvalreferrals.uat.arval.com
authservices.smsps-coll.bnl.it
autoselect.arval.be
autoselect.arval.fi
autoselect.arval.pl
autoselect.arval.pt
be.isf.bnpparibas-pf.com
cct-wm-twn.bnpparibas.asia
cct-wm-twn.staging.bnpparibas.asia
cct-wm.bnpparibas.asia
cct-wm.staging.bnpparibas.asia
cms.bnpparibas.asia
cofinoga.fr
compliance.group.api.bnpparibas
connexistrade.bnpparibas.com
connexistrade.staging.bnpparibas.com
csost.bnpparibas-am.it
cts-lra-rec.bnpparibas.com
cxt6-uat.bnpparibas.com
de.isf.bnpparibas-pf.com
es.isf.bnpparibas-pf.com
etranplus.bnpparibas.com
etsservices-pp.bnpparibas.com
hfsadmin-kpt.bnpparibas.com
hm.agcbe.isf.staging.bnpparibas-pf.com
hm.agcde.isf.staging.bnpparibas-pf.com
hm.agces.isf.staging.bnpparibas-pf.com
hm.agcit.isf.staging.bnpparibas-pf.com
hm.agcmx.isf.staging.bnpparibas-pf.com
hm.agcnl.isf.staging.bnpparibas-pf.com
hm.agcpl.isf.staging.bnpparibas-pf.com
hm.agcpt.isf.staging.bnpparibas-pf.com
hm.be.isf.staging.bnpparibas-pf.com
hm.de.isf.staging.bnpparibas-pf.com
hm.es.isf.staging.bnpparibas-pf.com
hm.it.isf.staging.bnpparibas-pf.com
hm.mx.isf.staging.bnpparibas-pf.com
hm.nl.isf.staging.bnpparibas-pf.com
hm.pl.isf.staging.bnpparibas-pf.com
hm.pt.isf.staging.bnpparibas-pf.com
hm.uk.isf.staging.bnpparibas-pf.com
it.isf.bnpparibas-pf.com
moncontrat.renovpret.fr
mx.isf.bnpparibas-pf.com
myimpact.wealthmanagement-staging.bnpparibas
myimpact.wealthmanagement.bnpparibas
nl.isf.bnpparibas-pf.com
noa-ctc.bnpparibas.com
noa-nlk.bnpparibas.com
noa-pls.bnpparibas.com
noa.bnpparibas.com
obbligazioni.bnpparibas.com
oneproctool-supplier.bnpparibas.com
partnermutui-coll.bnl.it
pl.isf.bnpparibas-pf.com
portail.preprod.assurance-epargne-pension.fr
pt.isf.bnpparibas-pf.com
recette.portail-aep.fr
securesharing.bnpparibas.com
securesharing.staging.bnpparibas.com
securities-crisisweb.bnpparibas.com
securitiesrec-crisisweb.bnpparibas.com
selfticketing.smsps-coll.bnl.it
staging.my.bicici.com
staging.my.bicis.sn
staging.portail-aep.fr
uk.isf.bnpparibas-pf.com
voc-staging.bnpparibas.asia
voc-staging.bnpparibas.ch
webdoc-dz.bnpparibas.com
webdoc-dz.bnpparibas.net
wow.bnpparibas.com
www.autoselect.arval.be
www.autoselect.arval.pt
www.cofinoga.fr
www.compliance.group.api.bnpparibas
www.csost.bnpparibas-am.it
www.cts-lra-rec.bnpparibas.com
www.staging.my.bicici.com
www.staging.my.bicis.sn
www.webdoc-dz.bnpparibas.com
www.webdoc-dz.bnpparibas.net

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp11s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIRHDCCEASgAwIBAgIQDycUdJsvFyql8Wb+lq9SajANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yNDA1MjgwMDAwMDBa
Fw0yNTAxMjMyMzU5NTlaMHMxCzAJBgNVBAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRl
LUZyYW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJB
UyBTQTEeMBwGA1UEAxMVYm5wMTFzLmJucHBhcmliYXMuY29tMFkwEwYHKoZIzj0C
AQYIKoZIzj0DAQcDQgAEy/AeuH8fdkqmnl3cnfdhIzLP5EvPZpuSCa5rJoS9EJhF
rhVvqxNUBzqQZHVyKdRoETCyt0KqJ7L4Rh7wbOjqDaOCDpkwgg6VMB8GA1UdIwQY
MBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBRomB16RMEvBEQFutc7
77qErNszNjCCC0AGA1UdEQSCCzcwggszghVibnAxMXMuYm5wcGFyaWJhcy5jb22C
G2FjcXVpc3RhLW9ubGluZS1jb2xsLmJubC5pdIIWYWNxdWlzdGEtb25saW5lLmJu
bC5pdIIlYWR2aXNvcnljb2xsLnN0YWdpbmcuYXJ0aWdpYW5jYXNzYS5pdIIbYWdj
YmUuaXNmLmJucHBhcmliYXMtcGYuY29tghthZ2NkZS5pc2YuYm5wcGFyaWJhcy1w
Zi5jb22CG2FnY2VzLmlzZi5ibnBwYXJpYmFzLXBmLmNvbYIbYWdjaXQuaXNmLmJu
cHBhcmliYXMtcGYuY29tghthZ2NteC5pc2YuYm5wcGFyaWJhcy1wZi5jb22CG2Fn
Y25sLmlzZi5ibnBwYXJpYmFzLXBmLmNvbYIbYWdjcGwuaXNmLmJucHBhcmliYXMt
cGYuY29tghthZ2NwdC5pc2YuYm5wcGFyaWJhcy1wZi5jb22CGGFydmFscmVmZXJy
YWxzLmFydmFsLmNvbYIcYXJ2YWxyZWZlcnJhbHMucHJlLmFydmFsLmNvbYIcYXJ2
YWxyZWZlcnJhbHMudWF0LmFydmFsLmNvbYIeYXV0aHNlcnZpY2VzLnNtc3BzLWNv
bGwuYm5sLml0ghNhdXRvc2VsZWN0LmFydmFsLmJlghNhdXRvc2VsZWN0LmFydmFs
LmZpghNhdXRvc2VsZWN0LmFydmFsLnBsghNhdXRvc2VsZWN0LmFydmFsLnB0ghhi
ZS5pc2YuYm5wcGFyaWJhcy1wZi5jb22CGmNjdC13bS10d24uYm5wcGFyaWJhcy5h
c2lhgiJjY3Qtd20tdHduLnN0YWdpbmcuYm5wcGFyaWJhcy5hc2lhghZjY3Qtd20u
Ym5wcGFyaWJhcy5hc2lhgh5jY3Qtd20uc3RhZ2luZy5ibnBwYXJpYmFzLmFzaWGC
E2Ntcy5ibnBwYXJpYmFzLmFzaWGCC2NvZmlub2dhLmZygh9jb21wbGlhbmNlLmdy
b3VwLmFwaS5ibnBwYXJpYmFzghxjb25uZXhpc3RyYWRlLmJucHBhcmliYXMuY29t
giRjb25uZXhpc3RyYWRlLnN0YWdpbmcuYm5wcGFyaWJhcy5jb22CFmNzb3N0LmJu
cHBhcmliYXMtYW0uaXSCGmN0cy1scmEtcmVjLmJucHBhcmliYXMuY29tghdjeHQ2
LXVhdC5ibnBwYXJpYmFzLmNvbYIYZGUuaXNmLmJucHBhcmliYXMtcGYuY29tghhl
cy5pc2YuYm5wcGFyaWJhcy1wZi5jb22CGGV0cmFucGx1cy5ibnBwYXJpYmFzLmNv
bYIdZXRzc2VydmljZXMtcHAuYm5wcGFyaWJhcy5jb22CG2hmc2FkbWluLWtwdC5i
bnBwYXJpYmFzLmNvbYImaG0uYWdjYmUuaXNmLnN0YWdpbmcuYm5wcGFyaWJhcy1w
Zi5jb22CJmhtLmFnY2RlLmlzZi5zdGFnaW5nLmJucHBhcmliYXMtcGYuY29tgiZo
bS5hZ2Nlcy5pc2Yuc3RhZ2luZy5ibnBwYXJpYmFzLXBmLmNvbYImaG0uYWdjaXQu
aXNmLnN0YWdpbmcuYm5wcGFyaWJhcy1wZi5jb22CJmhtLmFnY214LmlzZi5zdGFn
aW5nLmJucHBhcmliYXMtcGYuY29tgiZobS5hZ2NubC5pc2Yuc3RhZ2luZy5ibnBw
YXJpYmFzLXBmLmNvbYImaG0uYWdjcGwuaXNmLnN0YWdpbmcuYm5wcGFyaWJhcy1w
Zi5jb22CJmhtLmFnY3B0LmlzZi5zdGFnaW5nLmJucHBhcmliYXMtcGYuY29tgiNo
bS5iZS5pc2Yuc3RhZ2luZy5ibnBwYXJpYmFzLXBmLmNvbYIjaG0uZGUuaXNmLnN0
YWdpbmcuYm5wcGFyaWJhcy1wZi5jb22CI2htLmVzLmlzZi5zdGFnaW5nLmJucHBh
cmliYXMtcGYuY29tgiNobS5pdC5pc2Yuc3RhZ2luZy5ibnBwYXJpYmFzLXBmLmNv
bYIjaG0ubXguaXNmLnN0YWdpbmcuYm5wcGFyaWJhcy1wZi5jb22CI2htLm5sLmlz
Zi5zdGFnaW5nLmJucHBhcmliYXMtcGYuY29tgiNobS5wbC5pc2Yuc3RhZ2luZy5i
bnBwYXJpYmFzLXBmLmNvbYIjaG0ucHQuaXNmLnN0YWdpbmcuYm5wcGFyaWJhcy1w
Zi5jb22CI2htLnVrLmlzZi5zdGFnaW5nLmJucHBhcmliYXMtcGYuY29tghhpdC5p
c2YuYm5wcGFyaWJhcy1wZi5jb22CF21vbmNvbnRyYXQucmVub3ZwcmV0LmZyghht
eC5pc2YuYm5wcGFyaWJhcy1wZi5jb22CLG15aW1wYWN0LndlYWx0aG1hbmFnZW1l
bnQtc3RhZ2luZy5ibnBwYXJpYmFzgiRteWltcGFjdC53ZWFsdGhtYW5hZ2VtZW50
LmJucHBhcmliYXOCGG5sLmlzZi5ibnBwYXJpYmFzLXBmLmNvbYIWbm9hLWN0Yy5i
bnBwYXJpYmFzLmNvbYIWbm9hLW5say5ibnBwYXJpYmFzLmNvbYIWbm9hLXBscy5i
bnBwYXJpYmFzLmNvbYISbm9hLmJucHBhcmliYXMuY29tghtvYmJsaWdhemlvbmku
Ym5wcGFyaWJhcy5jb22CI29uZXByb2N0b29sLXN1cHBsaWVyLmJucHBhcmliYXMu
Y29tghhwYXJ0bmVybXV0dWktY29sbC5ibmwuaXSCGHBsLmlzZi5ibnBwYXJpYmFz
LXBmLmNvbYIscG9ydGFpbC5wcmVwcm9kLmFzc3VyYW5jZS1lcGFyZ25lLXBlbnNp
b24uZnKCGHB0LmlzZi5ibnBwYXJpYmFzLXBmLmNvbYIWcmVjZXR0ZS5wb3J0YWls
LWFlcC5mcoIcc2VjdXJlc2hhcmluZy5ibnBwYXJpYmFzLmNvbYIkc2VjdXJlc2hh
cmluZy5zdGFnaW5nLmJucHBhcmliYXMuY29tgiNzZWN1cml0aWVzLWNyaXNpc3dl
Yi5ibnBwYXJpYmFzLmNvbYImc2VjdXJpdGllc3JlYy1jcmlzaXN3ZWIuYm5wcGFy
aWJhcy5jb22CH3NlbGZ0aWNrZXRpbmcuc21zcHMtY29sbC5ibmwuaXSCFXN0YWdp
bmcubXkuYmljaWNpLmNvbYITc3RhZ2luZy5teS5iaWNpcy5zboIWc3RhZ2luZy5w
b3J0YWlsLWFlcC5mcoIYdWsuaXNmLmJucHBhcmliYXMtcGYuY29tght2b2Mtc3Rh
Z2luZy5ibnBwYXJpYmFzLmFzaWGCGXZvYy1zdGFnaW5nLmJucHBhcmliYXMuY2iC
GHdlYmRvYy1kei5ibnBwYXJpYmFzLmNvbYIYd2ViZG9jLWR6LmJucHBhcmliYXMu
bmV0ghJ3b3cuYm5wcGFyaWJhcy5jb22CF3d3dy5hdXRvc2VsZWN0LmFydmFsLmJl
ghd3d3cuYXV0b3NlbGVjdC5hcnZhbC5wdIIPd3d3LmNvZmlub2dhLmZygiN3d3cu
Y29tcGxpYW5jZS5ncm91cC5hcGkuYm5wcGFyaWJhc4Iad3d3LmNzb3N0LmJucHBh
cmliYXMtYW0uaXSCHnd3dy5jdHMtbHJhLXJlYy5ibnBwYXJpYmFzLmNvbYIZd3d3
LnN0YWdpbmcubXkuYmljaWNpLmNvbYIXd3d3LnN0YWdpbmcubXkuYmljaXMuc26C
HHd3dy53ZWJkb2MtZHouYm5wcGFyaWJhcy5jb22CHHd3dy53ZWJkb2MtZHouYm5w
cGFyaWJhcy5uZXQwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYb
aHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6
aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAy
MENBMS00LmNybDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lD
ZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEFBQcBAQRzMHEwJAYI
KwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9
aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2
MjAyMENBMS0xLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYBBAHWeQIEAgSCAW0E
ggFpAWcAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAY+//OLT
AAAEAwBHMEUCIQCLRMNVvHFHh52xDrh35a2ayqllnfVivh0lc3YxUrtNMQIgI7F4
YbzkNRoKVe/5FpRzgf5D8WSIGAE52Vqfwq6o5HEAdQDm0jFjQHeMwRBBBtdxuc7B
0kD2loSG+7qHMh39HjeOUAAAAY+//OMlAAAEAwBGMEQCIDc78v4Thw2rNnTUi7eF
1imwqiiJrtxe2UAghHKOLdWFAiAhJ1Reu7JMUmlcbVLPQ2EfJ9z+XmbsPucyZRV5
tjXffQB2AKLjCuRF772tm3447Udnd1PXgluElNcrXhssxLlQpEfnAAABj7/8488A
AAQDAEcwRQIgYLKWNvOLeT9TRpyBTxJilkwtLnMeByoFXhF8GlHgAdgCIQDHucDK
4dWcd6m3/zr2aK6KHUlnW4RGzzRFNT55MTbEvjANBgkqhkiG9w0BAQsFAAOCAQEA
KqEJjwGKdiQ7cg2s1U/HDNODdUKxZy8z/Sv8k23uMiclmCDFuN1myhszS9R1zaFa
Zs7kVbjLmPrHwXaVtcpsA536xFzOkkh32QJMU7DN7mXXlSv52quxMeszQ4kysLyK
Ti1/IMfWZ/fjOJ4zWzqsjNGG8ZTAggI0dxOoyjkswoxYbNI0XudVZiMgwRBfjdt/
Sa7HQbvZ8ZXm5cQaM42bAv1ebK690yqpPwBFsPPtshDubwmLl/KCaBSSYp3VoPZQ
3c0tbONvYUdxxCyKRARQ0KFsr5lvq7Zm0gd+Oq/l7T9XS7DlrlpXKkEE2F88V6eT
uAlj6ZfDkYI/kacUHA5yng==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEy/AeuH8fdkqmnl3cnfdhIzLP5EvP
ZpuSCa5rJoS9EJhFrhVvqxNUBzqQZHVyKdRoETCyt0KqJ7L4Rh7wbOjqDQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20141334400942626496121617107643224682
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp11s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004cbf01eb87f1f764aa69e5ddc9df7612332cfe44bcf669b9209ae6b2684bd109845ae156fab1354073a9064757229d4681130b2b742aa27b2f8461ef06ce8ea0d
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							68981d7a44c12f044405bad73befba84acdb3336
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2871 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp11s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquista-online-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acquista-online.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advisorycoll.staging.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcbe.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcde.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agces.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcit.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcmx.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcnl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcpl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agcpt.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalreferrals.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoselect.arval.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'be.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-twn.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm-twn.staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-wm.staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.group.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistrade.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistrade.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'csost.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cxt6-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'de.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etsservices-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hfsadmin-kpt.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcbe.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcde.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agces.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcit.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcmx.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcnl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcpl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.agcpt.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.be.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.de.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.es.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.it.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.mx.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.nl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.pl.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.pt.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.uk.isf.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'it.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moncontrat.renovpret.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myimpact.wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myimpact.wealthmanagement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-ctc.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-nlk.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa-pls.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obbligazioni.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool-supplier.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partnermutui-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pl.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail.preprod.assurance-epargne-pension.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pt.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesharing.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securesharing.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securities-crisisweb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesrec-crisisweb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selfticketing.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.my.bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uk.isf.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voc-staging.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wow.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoselect.arval.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoselect.arval.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance.group.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.csost.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.my.bicici.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.my.bicis.sn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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