bnp07b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:be:c6:fa:d6:ac:cb:46:1d:54:db:7e:fa:2a:86:e5 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:be:c6:fa:d6:ac:cb:46:1d:54:db:7e:fa:2a:86:e5
Serial Number (int): 2319800189487371995676165390927038181
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 55:cd:1f:2c:6e:10:9e:4c:6f:39:95:99:58:7f:07:0b:2d:32:a8:10
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 6b:88:db:37:e2:37:6d:f1:e9:73:25:e1:c2:f4:ac:dd:e5:00:35:4d
Fingerprint (sha256): 15:09:8d:2d:4d:26:aa:7f:73:be:ad:85:a6:a2:9d:05:1e:cc:e1:c9:2d:aa:f2:29:5f:6b:2b:88:79:7d:c6:37

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bnp07b.bnpparibas.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp07b.bnpparibas.com
simulationrentes-pp-assurance.cardif.fr
epicaste-fwk-pp-assurance.cardif.fr
epicaste-refpdt-pp-assurance.cardif.fr
espace-indemnisation-c03-rec.cardif.fr
comptes-pp.cardif.fr
cis.sharekhan.com
propositionarbitrage-pp-assurance.cardif.fr
espace-indemnisation-pp.cardif.fr
pre-dsa-services.cardif.pl
theamquant.bnpparibas-am.com
finagora-pp.cardif.fr
comptes-c03-rec.cardif.fr
www.wealthtiger.com
espace-assurance-c03-rec.cardif.fr
www.investment-city.bnpparibas-am.fr
espace-assurance-c01-rec.cardif.fr
wwwcollnew.bnl.it
fastaccess-pp.cardif.fr
espace-client-pp.cardif.fr
espace-assurance-pp.cardif.fr
consultationcomptes-pp-assurance.cardif.fr
websalaries-preprod.assurance.fr
sfp-pp-assurance.cardif.fr
dsa-manage.cardif.pl
investment-city.bnpparibas-am.fr
dsa-sales.cardif.pl
www.websalaries-preprod.assurance.fr
roszczenia.cardif.pl
espace-assurance-c02-rec.cardif.fr
ptp-pp-assurance.cardif.fr
sharekhanfinance.com
www.dsa-services.cardif.pl
www.comercios.cetelem.es
pms.sharekhan.com
comptes-c02-rec.cardif.fr
www.dsa-sales.cardif.pl
dsa-services.cardif.pl
adminfundquest-tmp.cardif.fr
espace-indemnisation-c02-rec.cardif.fr
newtrade.sharekhan.com
shaker-pp-assurance.cardif.fr
www.sharekhanfinance.com
protocolesligne-pp.cardif.fr
geolocalisation-pp-assurance.cardif.fr
finagora-c03-rec.cardif.fr
succession-assurance-vie-c02-rec.cardif.fr
ew-ppd.cardif.ro
tradetiger.sharekhan.com
infosync.bnl.it
investment-city.bnpparibas-am.de
finagora-c01-rec.cardif.fr
giant-pp-assurance.cardif.fr
ss-qa.rcs.co.za
finagora-c02-rec.cardif.fr
suivigiant-pp-assurance.cardif.fr
mypms.sharekhan.com
espace-client-c02-rec.cardif.fr
trade.sharekhan.com
www.cetelem.es
espace-indemnisation-c01-rec.cardif.fr
www.roszczenia.cardif.pl
alfin-pp-assurance.cardif.fr
www.auto.cetelem.es
www.zonacliente.cetelem.es
suivigiant-prod-assurance.cardif.fr
adminfundquest-pp.cardif.fr
strade.sharekhan.com
comptes-c01-rec.cardif.fr
www.sharekhan.com
shaker-pp-tmp-assurance.cardif.fr
succession-assurance-vie-c01-rec.cardif.fr
www.pre-dsa-services.cardif.pl
fastaccess-c01-rec.cardif.fr
epicaste-pp-assurance.cardif.fr
instamf.sharekhan.com
simulationcg-pp-assurance.cardif.fr
ew.cardif.ro
fastaccess-c03-rec.cardif.fr
espace-client-c03-rec.cardif.fr
china.bnpparibas-am.com
confirmation.sharekhan.com
www.dsa-manage.cardif.pl
dft.sharekhan.com
adminfundquest.cardif.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPsDCCDpigAwIBAgIQAb7G+tasy0YdVNt++iqG5TANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjAwMTEwMDAwMDAwWhcN
MjEwMTE0MTIwMDAwWjByMQswCQYDVQQGEwJGUjEWMBQGA1UECBMNSWxlIGRlIEZy
YW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJBUyBT
QTEeMBwGA1UEAxMVYm5wMDdiLmJucHBhcmliYXMuY29tMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEApLIOS37gX8cQSAhOMmXtE2ALpSJ2Cu3VUIQPmBwe
F8uN82x1n5zKoQmCJGDRpAFvtD9qIA1yg42nUWxTaW/u2i+aO4IeEIH7fHdnh6Pa
F2owO5Hquz7JgMmAdPenWJBgrLIPm8B0cUer4nFVuCL1N2pwbYyTJSjNaEO2b7X7
zRr4TxjuxEbt75MvWzFzPdXPJBXxLlVz2nKfBdKgSl0jKr4Nsn54+QQX77/YQotK
a+z4iuOlI25/cKx3jITEWfcC+gEr6upe3xZ502oE5p/zBqWiFhoGuHFrU3g9O81x
xO98kQKHQQO1puAk2K8zivv2dk4SclHacbwWe32/DyhZNQIDAQABo4IMZTCCDGEw
HwYDVR0jBBgwFoAUD4BhHIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFFXNHyxu
EJ5MbzmVmVh/BwstMqgQMIIJogYDVR0RBIIJmTCCCZWCFWJucDA3Yi5ibnBwYXJp
YmFzLmNvbYInc2ltdWxhdGlvbnJlbnRlcy1wcC1hc3N1cmFuY2UuY2FyZGlmLmZy
giNlcGljYXN0ZS1md2stcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoImZXBpY2FzdGUt
cmVmcGR0LXBwLWFzc3VyYW5jZS5jYXJkaWYuZnKCJmVzcGFjZS1pbmRlbW5pc2F0
aW9uLWMwMy1yZWMuY2FyZGlmLmZyghRjb21wdGVzLXBwLmNhcmRpZi5mcoIRY2lz
LnNoYXJla2hhbi5jb22CK3Byb3Bvc2l0aW9uYXJiaXRyYWdlLXBwLWFzc3VyYW5j
ZS5jYXJkaWYuZnKCIWVzcGFjZS1pbmRlbW5pc2F0aW9uLXBwLmNhcmRpZi5mcoIa
cHJlLWRzYS1zZXJ2aWNlcy5jYXJkaWYucGyCHHRoZWFtcXVhbnQuYm5wcGFyaWJh
cy1hbS5jb22CFWZpbmFnb3JhLXBwLmNhcmRpZi5mcoIZY29tcHRlcy1jMDMtcmVj
LmNhcmRpZi5mcoITd3d3LndlYWx0aHRpZ2VyLmNvbYIiZXNwYWNlLWFzc3VyYW5j
ZS1jMDMtcmVjLmNhcmRpZi5mcoIkd3d3LmludmVzdG1lbnQtY2l0eS5ibnBwYXJp
YmFzLWFtLmZygiJlc3BhY2UtYXNzdXJhbmNlLWMwMS1yZWMuY2FyZGlmLmZyghF3
d3djb2xsbmV3LmJubC5pdIIXZmFzdGFjY2Vzcy1wcC5jYXJkaWYuZnKCGmVzcGFj
ZS1jbGllbnQtcHAuY2FyZGlmLmZygh1lc3BhY2UtYXNzdXJhbmNlLXBwLmNhcmRp
Zi5mcoIqY29uc3VsdGF0aW9uY29tcHRlcy1wcC1hc3N1cmFuY2UuY2FyZGlmLmZy
giB3ZWJzYWxhcmllcy1wcmVwcm9kLmFzc3VyYW5jZS5mcoIac2ZwLXBwLWFzc3Vy
YW5jZS5jYXJkaWYuZnKCFGRzYS1tYW5hZ2UuY2FyZGlmLnBsgiBpbnZlc3RtZW50
LWNpdHkuYm5wcGFyaWJhcy1hbS5mcoITZHNhLXNhbGVzLmNhcmRpZi5wbIIkd3d3
LndlYnNhbGFyaWVzLXByZXByb2QuYXNzdXJhbmNlLmZyghRyb3N6Y3plbmlhLmNh
cmRpZi5wbIIiZXNwYWNlLWFzc3VyYW5jZS1jMDItcmVjLmNhcmRpZi5mcoIacHRw
LXBwLWFzc3VyYW5jZS5jYXJkaWYuZnKCFHNoYXJla2hhbmZpbmFuY2UuY29tghp3
d3cuZHNhLXNlcnZpY2VzLmNhcmRpZi5wbIIYd3d3LmNvbWVyY2lvcy5jZXRlbGVt
LmVzghFwbXMuc2hhcmVraGFuLmNvbYIZY29tcHRlcy1jMDItcmVjLmNhcmRpZi5m
coIXd3d3LmRzYS1zYWxlcy5jYXJkaWYucGyCFmRzYS1zZXJ2aWNlcy5jYXJkaWYu
cGyCHGFkbWluZnVuZHF1ZXN0LXRtcC5jYXJkaWYuZnKCJmVzcGFjZS1pbmRlbW5p
c2F0aW9uLWMwMi1yZWMuY2FyZGlmLmZyghZuZXd0cmFkZS5zaGFyZWtoYW4uY29t
gh1zaGFrZXItcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoIYd3d3LnNoYXJla2hhbmZp
bmFuY2UuY29tghxwcm90b2NvbGVzbGlnbmUtcHAuY2FyZGlmLmZygiZnZW9sb2Nh
bGlzYXRpb24tcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoIaZmluYWdvcmEtYzAzLXJl
Yy5jYXJkaWYuZnKCKnN1Y2Nlc3Npb24tYXNzdXJhbmNlLXZpZS1jMDItcmVjLmNh
cmRpZi5mcoIQZXctcHBkLmNhcmRpZi5yb4IYdHJhZGV0aWdlci5zaGFyZWtoYW4u
Y29tgg9pbmZvc3luYy5ibmwuaXSCIGludmVzdG1lbnQtY2l0eS5ibnBwYXJpYmFz
LWFtLmRlghpmaW5hZ29yYS1jMDEtcmVjLmNhcmRpZi5mcoIcZ2lhbnQtcHAtYXNz
dXJhbmNlLmNhcmRpZi5mcoIPc3MtcWEucmNzLmNvLnphghpmaW5hZ29yYS1jMDIt
cmVjLmNhcmRpZi5mcoIhc3VpdmlnaWFudC1wcC1hc3N1cmFuY2UuY2FyZGlmLmZy
ghNteXBtcy5zaGFyZWtoYW4uY29tgh9lc3BhY2UtY2xpZW50LWMwMi1yZWMuY2Fy
ZGlmLmZyghN0cmFkZS5zaGFyZWtoYW4uY29tgg53d3cuY2V0ZWxlbS5lc4ImZXNw
YWNlLWluZGVtbmlzYXRpb24tYzAxLXJlYy5jYXJkaWYuZnKCGHd3dy5yb3N6Y3pl
bmlhLmNhcmRpZi5wbIIcYWxmaW4tcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoITd3d3
LmF1dG8uY2V0ZWxlbS5lc4Iad3d3LnpvbmFjbGllbnRlLmNldGVsZW0uZXOCI3N1
aXZpZ2lhbnQtcHJvZC1hc3N1cmFuY2UuY2FyZGlmLmZyghthZG1pbmZ1bmRxdWVz
dC1wcC5jYXJkaWYuZnKCFHN0cmFkZS5zaGFyZWtoYW4uY29tghljb21wdGVzLWMw
MS1yZWMuY2FyZGlmLmZyghF3d3cuc2hhcmVraGFuLmNvbYIhc2hha2VyLXBwLXRt
cC1hc3N1cmFuY2UuY2FyZGlmLmZygipzdWNjZXNzaW9uLWFzc3VyYW5jZS12aWUt
YzAxLXJlYy5jYXJkaWYuZnKCHnd3dy5wcmUtZHNhLXNlcnZpY2VzLmNhcmRpZi5w
bIIcZmFzdGFjY2Vzcy1jMDEtcmVjLmNhcmRpZi5mcoIfZXBpY2FzdGUtcHAtYXNz
dXJhbmNlLmNhcmRpZi5mcoIVaW5zdGFtZi5zaGFyZWtoYW4uY29tgiNzaW11bGF0
aW9uY2ctcHAtYXNzdXJhbmNlLmNhcmRpZi5mcoIMZXcuY2FyZGlmLnJvghxmYXN0
YWNjZXNzLWMwMy1yZWMuY2FyZGlmLmZygh9lc3BhY2UtY2xpZW50LWMwMy1yZWMu
Y2FyZGlmLmZyghdjaGluYS5ibnBwYXJpYmFzLWFtLmNvbYIaY29uZmlybWF0aW9u
LnNoYXJla2hhbi5jb22CGHd3dy5kc2EtbWFuYWdlLmNhcmRpZi5wbIIRZGZ0LnNo
YXJla2hhbi5jb22CGGFkbWluZnVuZHF1ZXN0LmNhcmRpZi5mcjAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIw
L6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzYuY3Js
MC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc2LmNy
bDBMBgNVHSAERTBDMDcGCWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczov
L3d3dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECAjB8BggrBgEFBQcBAQRwMG4w
JAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcw
AoY6aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3Vy
ZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFvj6medQAABAMA
RzBFAiAfsJJpDafyGoMtJkk8PFtjFfj28EoJ3hVDA08OPErpJwIhAI3bRnfPtnaV
hvsE7ZUljHMuvPrLrJETsWLhMDkPry9ZAHYARJRlLrDuzq/EQAfYqP4owNrmgr7Y
yzG1P9MzlrW2gagAAAFvj6meIAAABAMARzBFAiBQ070iMU7tgFXmJT5pKb2ZIEeS
SvuQ8G/K6L2HNqyhHQIhAP+ucm+qY+KkL4pfe280cyjnd1g4kW2Gtc1A4MgPNqm9
MA0GCSqGSIb3DQEBCwUAA4IBAQDAeWP2jJtWhUSHoFxEsraaWFa+LfmnxGGnNsYM
zdoT/HCspE0Yj5WyNNOY/UZR1zo0K9AaNKP3GYuarb/oCeYQI/GhZdhrjBYaotAZ
4F85hMy16dtWOmwSy9/JMmgDD0FWoLG15fdtChH0ESa08SDXBUYEwFK/0skOSInO
6x2gUwdlKQYZ4+R2GjUhtcpL0jKHj8kWQGGhvcky3OvqL55zCOLwnxU1Vw9POrWl
ho/pLZR5k76yeEpg4J7blbKOYV34LWP2kj4DVJ70/wYg5+PtFWkYPQAsehxqB2d8
bIvQA6AMV35u/x0G9i32HjxC0w1Oc5emPLvUbM6Jd9nFlVsw
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLIOS37gX8cQSAhOMmXt
E2ALpSJ2Cu3VUIQPmBweF8uN82x1n5zKoQmCJGDRpAFvtD9qIA1yg42nUWxTaW/u
2i+aO4IeEIH7fHdnh6PaF2owO5Hquz7JgMmAdPenWJBgrLIPm8B0cUer4nFVuCL1
N2pwbYyTJSjNaEO2b7X7zRr4TxjuxEbt75MvWzFzPdXPJBXxLlVz2nKfBdKgSl0j
Kr4Nsn54+QQX77/YQotKa+z4iuOlI25/cKx3jITEWfcC+gEr6upe3xZ502oE5p/z
BqWiFhoGuHFrU3g9O81xxO98kQKHQQO1puAk2K8zivv2dk4SclHacbwWe32/DyhZ
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2319800189487371995676165390927038181
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-14 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20790884621325036667308901490211055292988429122538485811654651750263515772735040575624395724506432424650136435610998410697431971912045896325790402608309646900324614191638050379277166407034881881259911919186193695558335503414388848761834409798695292550551786973925660955087396662821137023696192238458557043206794980957607556679560152040758555036159660844376569464696307295448913543901317146783648725294800075479119193363211587071533931284514480527957979607617621527056243213588728242892668217239389201908795720309664775537663719966049338080057577165665681482392033676357597788114488862624255786601105496671514226350389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							55cd1f2c6e109e4c6f399599587f070b2d32a810
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2457 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationrentes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-fwk-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-refpdt-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'propositionarbitrage-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theamquant.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wealthtiger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcollnew.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'consultationcomptes-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.websalaries-preprod.assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-assurance-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ptp-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comercios.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-sales.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-tmp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newtrade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhanfinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'protocolesligne-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geolocalisation-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew-ppd.cardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tradetiger.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'infosync.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city.bnpparibas-am.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss-qa.rcs.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'finagora-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mypms.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-indemnisation-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roszczenia.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alfin-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suivigiant-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest-pp.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'strade.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comptes-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shaker-pp-tmp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'succession-assurance-vie-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pre-dsa-services.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c01-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epicaste-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'instamf.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-pp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ew.cardif.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espace-client-c03-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'confirmation.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dsa-manage.cardif.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dft.sharekhan.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adminfundquest.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016f8fa99e75000004030047304502201fb092690da7f21a832d26493c3c5b6315f8f6f04a09de1543034f0e3c4ae9270221008ddb4677cfb6769586fb04ed95258c732ebcfacbac9113b162e130390faf2f590076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016f8fa99e200000040300473045022050d3bd22314eed8055e6253e6929bd992047924afb90f06fcae8bd8736aca11d022100ffae726faa63e2a42f8a5f7b6f347328e7775838916d86b5cd40e0c80f36a9bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c07963f68c9b56854487a05c44b2b69a5856be2df9a7c461a736c60ccdda13fc70aca44d188f95b234d398fd4651d73a342bd01a34a3f7198b9aadbfe809e61023f1a165d86b8c161aa2d019e05f3984ccb5e9db563a6c12cbdfc93268030f4156a0b1b5e5f76d0a11f41126b4f120d7054604c052bfd2c90e4889ceeb1da0530765290619e3e4761a3521b5ca4bd232878fc9164061a1bdc932dcebea2f9e7308e2f09f1535570f4f3ab5a5868fe92d947993beb2784a60e09edb95b28e615df82d63f6923e03549ef4ff0620e7e3ed1569183d002c7a1c6a07677c6c8bd003a00c577e6eff1d06f62df61e3c42d30d4e7397a63cbbd46cce8977d9c5955b30