bnp12b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:90:43:20:d3:74:53:13:d8:32:9f:57:22:93:9d:b4 was issued on by DigiCert Inc.

With 98 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 04:90:43:20:d3:74:53:13:d8:32:9f:57:22:93:9d:b4
Serial Number (int): 6065964252955288578364838495619620276
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 84:c4:08:f7:93:c7:ac:22:cb:8d:62:91:61:2b:8e:a2:9b:57:1c:e1
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ad:8b:fa:1c:e2:18:98:5d:52:2e:80:01:fa:9f:94:06:1d:02:12:d1
Fingerprint (sha256): 0e:73:f4:08:b5:cb:65:9b:af:4b:31:03:d6:ad:f7:79:96:9a:e6:76:73:15:73:94:e6:18:f5:21:13:35:c8:9d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp12b.bnpparibas.com

98

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp12b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp12b.bnpparibas.com
accesspanel.echangeur.fr
arvalpartners.pre.arval.co.uk
assistanceconnector.qua.arval.com
assistanceconnector.uat.arval.com
b2b-gtm.uat.arval.com
backend.domofinance.com
backend.preprod.domofinance.com
backend.qualif.domofinance.com
bnpparibas-pf.com
bnpparibascardif.be
bnpparibascardif.com
bo.preprod.cercle-actionnaires.bnpparibas
brictweb.pre.arval.com
caplinkinvestor-ppd.bnpparibas.com
caplinkinvestor-uat.staging.bnpparibas.com
caplinkinvestor.bnpparibas.com
cardif.be
cardif.cz
cdn.bo.preprod.cercle-actionnaires.bnpparibas
cdn.preprod.cercle-actionnaires.bnpparibas
cnweb.pre.arval.com
collections.pre.arval.com
connexisguarantee-preprod.bnpparibas.com
connexisguarantee.bnpparibas.com
connexisguarantee.staging.bnpparibas.com
cwextranet-simple.staging.bnpparibas-am.com
cwextranet-strong.staging.bnpparibas-am.com
demo-oreo.staging.bnpparibas.com
demoweb.pre.arval.com
dkweb.pre.arval.com
domofinance.com
ebizuk.uat.arval.com
ebroker-preprod.sygmabnpparibas-pf.com
echangeur.fr
epicaste.cardif.fr
esmig.pre.arval.com
espace-client.cetelem.fr
expertws-remktg.qua.arval.com
fem.icare-service.com
fem.staging.icare-service.com
front.preprod.cercle-actionnaires.bnpparibas
geode1.staging.bnpparibas.com
geoloc-centresagrees-pp-assurance.cardif.fr
geoloc-centresagrees.cardif.fr
groeivermogen.nl
hsp-uat.bnpparibas.com
iam.uat.arval.com
investors-corner.staging.bnpparibas-am.com
itmig.pre.arval.com
m.itweb.uat.arval.com
m.ukweb.uat.arval.com
mobile.domofinance.com
mobile.preprod.domofinance.com
mobile.qualif.domofinance.com
my.uat.arval.com
mytreasury1.staging.bnpparibas.com
observatoirecetelem.com
partenaires.domofinance.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
personal-finance.bnpparibas
portailsygma-preprod.sygmabnpparibas-pf.com
preprod.domofinance.com
qualif.domofinance.com
quelle-epargne-choisir.staging.bnpparibas.com
recette-cck.icare-service.com
remktg-rest.qua.arval.com
riskstudy.uat.arval.com
roweb.pre.arval.com
rumig.pre.arval.com
seweb.pre.arval.com
sfdcconnector.pre.arval.fr
sid.demo.icare-service.com
sid.demo.staging.icare-service.com
sid.icare-service.com
sid.staging.icare-service.com
simulationcg-1-assurance.staging.cardif.fr
simulationcg-2-assurance.staging.cardif.fr
simulationcg-c01-assurance.staging.cardif.fr
simulationcg-c02-assurance.staging.cardif.fr
trmig.pre.arval.com
trweb.pre.arval.com
webicare.icare-service.com
webicarepp.icare-service.com
ws.demo.icare-service.com
www.accesspanel.echangeur.fr
www.bnpparibas-pf.com
www.bnpparibascardif.be
www.bnpparibascardif.com
www.cardif.cz
www.domofinance.com
www.echangeur.fr
www.groeivermogen.nl
www.observatoirecetelem.com
www.personal-finance.bnpparibas
www.preprod.domofinance.com
www.qualif.domofinance.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp12b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIREjCCD/qgAwIBAgIQBJBDINN0UxPYMp9XIpOdtDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA4MzAwMDAwMDBa
Fw0yNDA2MDQyMzU5NTlaMHMxCzAJBgNVBAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRl
LUZyYW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJB
UyBTQTEeMBwGA1UEAxMVYm5wMTJiLmJucHBhcmliYXMuY29tMFkwEwYHKoZIzj0C
AQYIKoZIzj0DAQcDQgAEJiD9ILsRyZxEJEpjsquu75WecqHggjNIyfI1Cb69vv8g
BOcuv/qQDdkpAixGcM28BM9IVaRB/IDsQxW/Z+bs86OCDo8wgg6LMB8GA1UdIwQY
MBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBSExAj3k8esIsuNYpFh
K46im1cc4TCCCzcGA1UdEQSCCy4wggsqghVibnAxMmIuYm5wcGFyaWJhcy5jb22C
GGFjY2Vzc3BhbmVsLmVjaGFuZ2V1ci5mcoIdYXJ2YWxwYXJ0bmVycy5wcmUuYXJ2
YWwuY28udWuCIWFzc2lzdGFuY2Vjb25uZWN0b3IucXVhLmFydmFsLmNvbYIhYXNz
aXN0YW5jZWNvbm5lY3Rvci51YXQuYXJ2YWwuY29tghViMmItZ3RtLnVhdC5hcnZh
bC5jb22CF2JhY2tlbmQuZG9tb2ZpbmFuY2UuY29tgh9iYWNrZW5kLnByZXByb2Qu
ZG9tb2ZpbmFuY2UuY29tgh5iYWNrZW5kLnF1YWxpZi5kb21vZmluYW5jZS5jb22C
EWJucHBhcmliYXMtcGYuY29tghNibnBwYXJpYmFzY2FyZGlmLmJlghRibnBwYXJp
YmFzY2FyZGlmLmNvbYIpYm8ucHJlcHJvZC5jZXJjbGUtYWN0aW9ubmFpcmVzLmJu
cHBhcmliYXOCFmJyaWN0d2ViLnByZS5hcnZhbC5jb22CImNhcGxpbmtpbnZlc3Rv
ci1wcGQuYm5wcGFyaWJhcy5jb22CKmNhcGxpbmtpbnZlc3Rvci11YXQuc3RhZ2lu
Zy5ibnBwYXJpYmFzLmNvbYIeY2FwbGlua2ludmVzdG9yLmJucHBhcmliYXMuY29t
ggljYXJkaWYuYmWCCWNhcmRpZi5jeoItY2RuLmJvLnByZXByb2QuY2VyY2xlLWFj
dGlvbm5haXJlcy5ibnBwYXJpYmFzgipjZG4ucHJlcHJvZC5jZXJjbGUtYWN0aW9u
bmFpcmVzLmJucHBhcmliYXOCE2Nud2ViLnByZS5hcnZhbC5jb22CGWNvbGxlY3Rp
b25zLnByZS5hcnZhbC5jb22CKGNvbm5leGlzZ3VhcmFudGVlLXByZXByb2QuYm5w
cGFyaWJhcy5jb22CIGNvbm5leGlzZ3VhcmFudGVlLmJucHBhcmliYXMuY29tgihj
b25uZXhpc2d1YXJhbnRlZS5zdGFnaW5nLmJucHBhcmliYXMuY29tgitjd2V4dHJh
bmV0LXNpbXBsZS5zdGFnaW5nLmJucHBhcmliYXMtYW0uY29tgitjd2V4dHJhbmV0
LXN0cm9uZy5zdGFnaW5nLmJucHBhcmliYXMtYW0uY29tgiBkZW1vLW9yZW8uc3Rh
Z2luZy5ibnBwYXJpYmFzLmNvbYIVZGVtb3dlYi5wcmUuYXJ2YWwuY29tghNka3dl
Yi5wcmUuYXJ2YWwuY29tgg9kb21vZmluYW5jZS5jb22CFGViaXp1ay51YXQuYXJ2
YWwuY29tgiZlYnJva2VyLXByZXByb2Quc3lnbWFibnBwYXJpYmFzLXBmLmNvbYIM
ZWNoYW5nZXVyLmZyghJlcGljYXN0ZS5jYXJkaWYuZnKCE2VzbWlnLnByZS5hcnZh
bC5jb22CGGVzcGFjZS1jbGllbnQuY2V0ZWxlbS5mcoIdZXhwZXJ0d3MtcmVta3Rn
LnF1YS5hcnZhbC5jb22CFWZlbS5pY2FyZS1zZXJ2aWNlLmNvbYIdZmVtLnN0YWdp
bmcuaWNhcmUtc2VydmljZS5jb22CLGZyb250LnByZXByb2QuY2VyY2xlLWFjdGlv
bm5haXJlcy5ibnBwYXJpYmFzgh1nZW9kZTEuc3RhZ2luZy5ibnBwYXJpYmFzLmNv
bYIrZ2VvbG9jLWNlbnRyZXNhZ3JlZXMtcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoIe
Z2VvbG9jLWNlbnRyZXNhZ3JlZXMuY2FyZGlmLmZyghBncm9laXZlcm1vZ2VuLm5s
ghZoc3AtdWF0LmJucHBhcmliYXMuY29tghFpYW0udWF0LmFydmFsLmNvbYIqaW52
ZXN0b3JzLWNvcm5lci5zdGFnaW5nLmJucHBhcmliYXMtYW0uY29tghNpdG1pZy5w
cmUuYXJ2YWwuY29tghVtLml0d2ViLnVhdC5hcnZhbC5jb22CFW0udWt3ZWIudWF0
LmFydmFsLmNvbYIWbW9iaWxlLmRvbW9maW5hbmNlLmNvbYIebW9iaWxlLnByZXBy
b2QuZG9tb2ZpbmFuY2UuY29tgh1tb2JpbGUucXVhbGlmLmRvbW9maW5hbmNlLmNv
bYIQbXkudWF0LmFydmFsLmNvbYIibXl0cmVhc3VyeTEuc3RhZ2luZy5ibnBwYXJp
YmFzLmNvbYIXb2JzZXJ2YXRvaXJlY2V0ZWxlbS5jb22CG3BhcnRlbmFpcmVzLmRv
bW9maW5hbmNlLmNvbYIjcGFydGVuYWlyZXMucHJlcHJvZC5kb21vZmluYW5jZS5j
b22CInBhcnRlbmFpcmVzLnF1YWxpZi5kb21vZmluYW5jZS5jb22CG3BlcnNvbmFs
LWZpbmFuY2UuYm5wcGFyaWJhc4IrcG9ydGFpbHN5Z21hLXByZXByb2Quc3lnbWFi
bnBwYXJpYmFzLXBmLmNvbYIXcHJlcHJvZC5kb21vZmluYW5jZS5jb22CFnF1YWxp
Zi5kb21vZmluYW5jZS5jb22CLXF1ZWxsZS1lcGFyZ25lLWNob2lzaXIuc3RhZ2lu
Zy5ibnBwYXJpYmFzLmNvbYIdcmVjZXR0ZS1jY2suaWNhcmUtc2VydmljZS5jb22C
GXJlbWt0Zy1yZXN0LnF1YS5hcnZhbC5jb22CF3Jpc2tzdHVkeS51YXQuYXJ2YWwu
Y29tghNyb3dlYi5wcmUuYXJ2YWwuY29tghNydW1pZy5wcmUuYXJ2YWwuY29tghNz
ZXdlYi5wcmUuYXJ2YWwuY29tghpzZmRjY29ubmVjdG9yLnByZS5hcnZhbC5mcoIa
c2lkLmRlbW8uaWNhcmUtc2VydmljZS5jb22CInNpZC5kZW1vLnN0YWdpbmcuaWNh
cmUtc2VydmljZS5jb22CFXNpZC5pY2FyZS1zZXJ2aWNlLmNvbYIdc2lkLnN0YWdp
bmcuaWNhcmUtc2VydmljZS5jb22CKnNpbXVsYXRpb25jZy0xLWFzc3VyYW5jZS5z
dGFnaW5nLmNhcmRpZi5mcoIqc2ltdWxhdGlvbmNnLTItYXNzdXJhbmNlLnN0YWdp
bmcuY2FyZGlmLmZygixzaW11bGF0aW9uY2ctYzAxLWFzc3VyYW5jZS5zdGFnaW5n
LmNhcmRpZi5mcoIsc2ltdWxhdGlvbmNnLWMwMi1hc3N1cmFuY2Uuc3RhZ2luZy5j
YXJkaWYuZnKCE3RybWlnLnByZS5hcnZhbC5jb22CE3Ryd2ViLnByZS5hcnZhbC5j
b22CGndlYmljYXJlLmljYXJlLXNlcnZpY2UuY29tghx3ZWJpY2FyZXBwLmljYXJl
LXNlcnZpY2UuY29tghl3cy5kZW1vLmljYXJlLXNlcnZpY2UuY29tghx3d3cuYWNj
ZXNzcGFuZWwuZWNoYW5nZXVyLmZyghV3d3cuYm5wcGFyaWJhcy1wZi5jb22CF3d3
dy5ibnBwYXJpYmFzY2FyZGlmLmJlghh3d3cuYm5wcGFyaWJhc2NhcmRpZi5jb22C
DXd3dy5jYXJkaWYuY3qCE3d3dy5kb21vZmluYW5jZS5jb22CEHd3dy5lY2hhbmdl
dXIuZnKCFHd3dy5ncm9laXZlcm1vZ2VuLm5sght3d3cub2JzZXJ2YXRvaXJlY2V0
ZWxlbS5jb22CH3d3dy5wZXJzb25hbC1maW5hbmNlLmJucHBhcmliYXOCG3d3dy5w
cmVwcm9kLmRvbW9maW5hbmNlLmNvbYIad3d3LnF1YWxpZi5kb21vZmluYW5jZS5j
b20wDgYDVR0PAQH/BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjCBjwYDVR0fBIGHMIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20v
RGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQu
Y3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2Nh
Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0x
LmNydDAJBgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwB2/4g/
Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYpGfkx0AAAEAwBIMEYCIQC3
gemx7gAcnl948ArpPBOXNK7/E1b9H9+mtJwZ4jerUwIhAKvH95SuX/klinmfE+OV
BaZkNRMCvMUEko1EXfx63H4EAHcASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/
qznYhHMAAAGKRn5KUAAABAMASDBGAiEAhe/kAne3K47qWDgOe/7k/BDNlluCgEWi
qbSIMwZe2x4CIQC2UK+5BfrPOZ30wVASxLCifhhkNSXGSA/h+x6FcBdi5gB1ANq2
v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABikZ+SfkAAAQDAEYwRAIg
IAA+zrOfvQ+xF/ybZOR5uacYRPDRyw8XtlfFJ1d7FUQCIEHBwh9k0uo0VExaKwbv
ZTRxC0P8nSGbPAAk1J2vvXpxMA0GCSqGSIb3DQEBCwUAA4IBAQAwyQNaLFwL4yYM
wk00+VdpZnh5fcvnOguQYcNTDLzm9hEuhTdOMFNG5z5TZb4O7WPDPEGj48Z4caYr
FKnwbwtAeNrD9wXHvI6WQDZ0OMHPikZt+PeaKMZN5E7hookJymG16D77S9sBkLdT
aBraNUh21UuTqwAD3hGQX+D0gT3mHNh9NuszWVZKY7bdHsNWJ8V9XeszKWwRKazu
A3idSVuwocAs0luFEG+GqnxEX7qr9v2VJX7zRrOyyjfKEhORIjRN0ycTnyr4bMrZ
zdurzYYByeo24u/ANGIC+s3DaBcHo7w6OCO+9Gdlqd2wakdWmPhPhLpiXeG83cIK
qyBosxnt
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEJiD9ILsRyZxEJEpjsquu75WecqHg
gjNIyfI1Cb69vv8gBOcuv/qQDdkpAixGcM28BM9IVaRB/IDsQxW/Z+bs8w==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6065964252955288578364838495619620276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp12b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00042620fd20bb11c99c44244a63b2abaeef959e72a1e0823348c9f23509bebdbeff2004e72ebffa900dd929022c4670cdbc04cf4855a441fc80ec4315bf67e6ecf3
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84c408f793c7ac22cb8d6291612b8ea29b571ce1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2862 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp12b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accesspanel.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvalpartners.pre.arval.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistanceconnector.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assistanceconnector.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2b-gtm.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backend.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brictweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor-uat.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'caplinkinvestor.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.bo.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collections.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisguarantee.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-simple.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cwextranet-strong.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-oreo.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demoweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dkweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebizuk.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'expertws-remktg.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fem.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'front.preprod.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode1.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoloc-centresagrees.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iam.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-corner.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.itweb.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.ukweb.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mytreasury1.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portailsygma-preprod.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quelle-epargne-choisir.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cck.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remktg-rest.qua.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'riskstudy.uat.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rumig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfdcconnector.pre.arval.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sid.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-1-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-2-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c01-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-c02-assurance.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trmig.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trweb.pre.arval.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicare.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webicarepp.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accesspanel.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardif.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.echangeur.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.groeivermogen.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.observatoirecetelem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.personal-finance.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018a467e4c740000040300483046022100b781e9b1ee001c9e5f78f00ae93c139734aeff1356fd1fdfa6b49c19e237ab53022100abc7f794ae5ff9258a799f13e39505a664351302bcc504928d445dfc7adc7e0400770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a467e4a50000004030048304602210085efe40277b72b8eea58380e7bfee4fc10cd965b828045a2a9b48833065edb1e022100b650afb905facf399df4c15012c4b0a27e18643525c6480fe1fb1e85701762e6007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a467e49f90000040300463044022020003eceb39fbd0fb117fc9b64e479b9a71844f0d1cb0f17b657c527577b1544022041c1c21f64d2ea34544c5a2b06ef6534710b43fc9d219b3c0024d49dafbd7a71
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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