bnp02b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 08:b0:70:c9:54:4d:57:c9:f6:a2:31:dc:97:16:d6:df was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:b0:70:c9:54:4d:57:c9:f6:a2:31:dc:97:16:d6:df
Serial Number (int): 11549955794207973684625864827805816543
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ca:3c:06:57:27:2b:c8:78:f4:80:10:b8:33:0e:52:5f:62:80:1f:45
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 19:b0:1c:29:6a:09:a3:03:64:b1:17:14:8b:d2:13:f9:89:e9:50:c8
Fingerprint (sha256): 18:ff:78:61:71:50:09:2d:25:d5:3e:61:08:8a:5a:84:d1:88:2a:4c:0f:e8:c0:ed:10:de:00:bd:44:44:ba:ea

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp02b.bnpparibas.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp02b.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp02b.bnpparibas.com
www.ratama-rec-pos.bnpparibas.dz
www.predom-pp.bnpparibas.dz
www.medianacoll.ifitalia.it
www.institutionnels.bnpparibas-am.fr
www.i-assurial.com
www.homol.boxauto.bnpparibas-pf.com
www.fundquestadvisor.com
www.easy.bnpparibas.lu
www.easy.bnpparibas.it
www.easy.bnpparibas.fr
www.easy.bnpparibas.de
www.easy.bnpparibas.com
www.easy.bnpparibas.ch
www.correspondant-epargne.fr
www.correspondant-assurance.fr
www.clients.fundquestadvisor.com
www.cardifluxvie.com
www.boite-outils-business.fr
www.bnpparibascardif.co.uk
www.bnpparibas-am.at
www.bgl.lu
www.betet.bnpparibas.hu
staging.international-buyers.bnpparibas.nl
staging.international-buyers.bnpparibas.fr
staging.international-buyers.bnpparibas.com
staging.boite-outils-business.fr
rt-tmp.creditclick.fr
ratama-rec-pos.bnpparibas.dz
prod-tmp.creditclick.fr
preprod.finagora.nl
predom-pp.bnpparibas.dz
pfx-rec.staging.bnpparibas.com
noasis.bnpparibas.com
medianacoll.ifitalia.it
international-buyers.bnpparibas.nl
international-buyers.bnpparibas.fr
institutionnels.bnpparibas-am.fr
homologation.international-buyers.bnpparibas.nl
homologation.international-buyers.bnpparibas.fr
homologation.international-buyers.bnpparibas.com
homologation.boite-outils-business.fr
homol.boxauto.bnpparibas-pf.com
funds-api.staging.bnpparibas.com
funds-api.bnpparibas.com
fundquestadvisor.com
europagoderec2.bnpparibas.com
europagoderec.bnpparibas.com
erelio.epargne-retraite-entreprises.bnpparibas.com
easy.bnpparibas.lu
easy.bnpparibas.it
easy.bnpparibas.fr
easy.bnpparibas.de
easy.bnpparibas.com
easy.bnpparibas.ch
ds-rec1.bnpparibas.com
docfinder.staging.bnpparibas-am.com
docfinder.is.bnpparibas-ip.com
docfinder.bnpparibas-am.com
cvn-rec.bnpparibas.com
correspondant-epargne.fr
correspondant-assurance.fr
corporatecard.bnl.bnpparibas.com
collect.dcrm.bnpparibas.fr
collect-pprod.dcrm.bnpparibas.fr
collect-emib.staging.bnpparibas.fr
collect-bnppf.bnpparibas.fr
collect-bnl.bnpparibas.fr
clients.fundquestadvisor.com
clients-fundquestadvisor-com.staging.bnpparibas-ip.com
cardifluxvie.com
boite-outils-business.fr
bnpparibascardif.co.uk
bnpparibas-am.at
bgl.lu
betet.bnpparibas.hu
apimcoll.bnl.it
accounts.ssce.staging.bnpparibas-pf.com
accounts-ssce.bnpparibas-pf.com
accounts-ssce-ppd.bnpparibas-pf.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com
c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Certificate

The complete raw certificate details for bnp02b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIObjCCDVagAwIBAgIQCLBwyVRNV8n2ojHclxbW3zANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMjA2MDkwMDAwMDBa
Fw0yMzA1MzEyMzU5NTlaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUg
RnJhbmNlMRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFT
IFNBMR4wHAYDVQQDExVibnAwMmIuYm5wcGFyaWJhcy5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQCtvMxYXEDRclpVBvj03d7X8NNND9/dMXhasOyj
ViAmf6iGioAaNifrsW+cjPqbi1Fw56gSgXl+36rVZ9vlRK1gdXG0rTszFRZf70eI
sEB8QM30k/3bnRZKy9TGmetaizZp6RSVFdTCCdU67CZwUEY6mILQ1JT5jfpNpzuW
f69LJfrR7DE/GOccIcCR5qCAq+ox7mvkgGQKod+WVjuS2XvxKVvU8VayJbtB+Cmv
jpAEqoOA/Ktj7fD1aLnzRxxPBxLdUU501QGK97MJodZerx4idwbCUNBI88zKnQz1
vCPeSYP58IzF7+W3Gakg4puxSjrcyNaHx3zyemCimeCKDiMXAgMBAAGjggshMIIL
HTAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUyjwG
VycryHj0gBC4Mw5SX2KAH0Uwggk3BgNVHREEggkuMIIJKoIVYm5wMDJiLmJucHBh
cmliYXMuY29tgiB3d3cucmF0YW1hLXJlYy1wb3MuYm5wcGFyaWJhcy5keoIbd3d3
LnByZWRvbS1wcC5ibnBwYXJpYmFzLmR6ght3d3cubWVkaWFuYWNvbGwuaWZpdGFs
aWEuaXSCJHd3dy5pbnN0aXR1dGlvbm5lbHMuYm5wcGFyaWJhcy1hbS5mcoISd3d3
LmktYXNzdXJpYWwuY29tgiN3d3cuaG9tb2wuYm94YXV0by5ibnBwYXJpYmFzLXBm
LmNvbYIYd3d3LmZ1bmRxdWVzdGFkdmlzb3IuY29tghZ3d3cuZWFzeS5ibnBwYXJp
YmFzLmx1ghZ3d3cuZWFzeS5ibnBwYXJpYmFzLml0ghZ3d3cuZWFzeS5ibnBwYXJp
YmFzLmZyghZ3d3cuZWFzeS5ibnBwYXJpYmFzLmRlghd3d3cuZWFzeS5ibnBwYXJp
YmFzLmNvbYIWd3d3LmVhc3kuYm5wcGFyaWJhcy5jaIIcd3d3LmNvcnJlc3BvbmRh
bnQtZXBhcmduZS5mcoIed3d3LmNvcnJlc3BvbmRhbnQtYXNzdXJhbmNlLmZygiB3
d3cuY2xpZW50cy5mdW5kcXVlc3RhZHZpc29yLmNvbYIUd3d3LmNhcmRpZmx1eHZp
ZS5jb22CHHd3dy5ib2l0ZS1vdXRpbHMtYnVzaW5lc3MuZnKCGnd3dy5ibnBwYXJp
YmFzY2FyZGlmLmNvLnVrghR3d3cuYm5wcGFyaWJhcy1hbS5hdIIKd3d3LmJnbC5s
dYIXd3d3LmJldGV0LmJucHBhcmliYXMuaHWCKnN0YWdpbmcuaW50ZXJuYXRpb25h
bC1idXllcnMuYm5wcGFyaWJhcy5ubIIqc3RhZ2luZy5pbnRlcm5hdGlvbmFsLWJ1
eWVycy5ibnBwYXJpYmFzLmZygitzdGFnaW5nLmludGVybmF0aW9uYWwtYnV5ZXJz
LmJucHBhcmliYXMuY29tgiBzdGFnaW5nLmJvaXRlLW91dGlscy1idXNpbmVzcy5m
coIVcnQtdG1wLmNyZWRpdGNsaWNrLmZyghxyYXRhbWEtcmVjLXBvcy5ibnBwYXJp
YmFzLmR6ghdwcm9kLXRtcC5jcmVkaXRjbGljay5mcoITcHJlcHJvZC5maW5hZ29y
YS5ubIIXcHJlZG9tLXBwLmJucHBhcmliYXMuZHqCHnBmeC1yZWMuc3RhZ2luZy5i
bnBwYXJpYmFzLmNvbYIVbm9hc2lzLmJucHBhcmliYXMuY29tghdtZWRpYW5hY29s
bC5pZml0YWxpYS5pdIIiaW50ZXJuYXRpb25hbC1idXllcnMuYm5wcGFyaWJhcy5u
bIIiaW50ZXJuYXRpb25hbC1idXllcnMuYm5wcGFyaWJhcy5mcoIgaW5zdGl0dXRp
b25uZWxzLmJucHBhcmliYXMtYW0uZnKCL2hvbW9sb2dhdGlvbi5pbnRlcm5hdGlv
bmFsLWJ1eWVycy5ibnBwYXJpYmFzLm5sgi9ob21vbG9nYXRpb24uaW50ZXJuYXRp
b25hbC1idXllcnMuYm5wcGFyaWJhcy5mcoIwaG9tb2xvZ2F0aW9uLmludGVybmF0
aW9uYWwtYnV5ZXJzLmJucHBhcmliYXMuY29tgiVob21vbG9nYXRpb24uYm9pdGUt
b3V0aWxzLWJ1c2luZXNzLmZygh9ob21vbC5ib3hhdXRvLmJucHBhcmliYXMtcGYu
Y29tgiBmdW5kcy1hcGkuc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIYZnVuZHMtYXBp
LmJucHBhcmliYXMuY29tghRmdW5kcXVlc3RhZHZpc29yLmNvbYIdZXVyb3BhZ29k
ZXJlYzIuYm5wcGFyaWJhcy5jb22CHGV1cm9wYWdvZGVyZWMuYm5wcGFyaWJhcy5j
b22CMmVyZWxpby5lcGFyZ25lLXJldHJhaXRlLWVudHJlcHJpc2VzLmJucHBhcmli
YXMuY29tghJlYXN5LmJucHBhcmliYXMubHWCEmVhc3kuYm5wcGFyaWJhcy5pdIIS
ZWFzeS5ibnBwYXJpYmFzLmZyghJlYXN5LmJucHBhcmliYXMuZGWCE2Vhc3kuYm5w
cGFyaWJhcy5jb22CEmVhc3kuYm5wcGFyaWJhcy5jaIIWZHMtcmVjMS5ibnBwYXJp
YmFzLmNvbYIjZG9jZmluZGVyLnN0YWdpbmcuYm5wcGFyaWJhcy1hbS5jb22CHmRv
Y2ZpbmRlci5pcy5ibnBwYXJpYmFzLWlwLmNvbYIbZG9jZmluZGVyLmJucHBhcmli
YXMtYW0uY29tghZjdm4tcmVjLmJucHBhcmliYXMuY29tghhjb3JyZXNwb25kYW50
LWVwYXJnbmUuZnKCGmNvcnJlc3BvbmRhbnQtYXNzdXJhbmNlLmZygiBjb3Jwb3Jh
dGVjYXJkLmJubC5ibnBwYXJpYmFzLmNvbYIaY29sbGVjdC5kY3JtLmJucHBhcmli
YXMuZnKCIGNvbGxlY3QtcHByb2QuZGNybS5ibnBwYXJpYmFzLmZygiJjb2xsZWN0
LWVtaWIuc3RhZ2luZy5ibnBwYXJpYmFzLmZyghtjb2xsZWN0LWJucHBmLmJucHBh
cmliYXMuZnKCGWNvbGxlY3QtYm5sLmJucHBhcmliYXMuZnKCHGNsaWVudHMuZnVu
ZHF1ZXN0YWR2aXNvci5jb22CNmNsaWVudHMtZnVuZHF1ZXN0YWR2aXNvci1jb20u
c3RhZ2luZy5ibnBwYXJpYmFzLWlwLmNvbYIQY2FyZGlmbHV4dmllLmNvbYIYYm9p
dGUtb3V0aWxzLWJ1c2luZXNzLmZyghZibnBwYXJpYmFzY2FyZGlmLmNvLnVrghBi
bnBwYXJpYmFzLWFtLmF0ggZiZ2wubHWCE2JldGV0LmJucHBhcmliYXMuaHWCD2Fw
aW1jb2xsLmJubC5pdIInYWNjb3VudHMuc3NjZS5zdGFnaW5nLmJucHBhcmliYXMt
cGYuY29tgh9hY2NvdW50cy1zc2NlLmJucHBhcmliYXMtcGYuY29tgiNhY2NvdW50
cy1zc2NlLXBwZC5ibnBwYXJpYmFzLXBmLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYD
VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyG
Omh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIw
MjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwPgYDVR0gBDcwNTAzBgZngQwB
AgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMH8G
CCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQu
Y29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGln
aUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBALF8c8rcqKtVjOvYndYP
kncQ9fQw+FNN3Otq+vVpM1bGAxS0rXCQjzrgFbpC6u8lnTWdDC6nACTajQe2kTRQ
ep36IrIc1GjUSrGyCCZTe7BluczAoPLRDBmzB0afp9jHowWSNDtlej5naHualSrA
nV8B41ga4QX2WlYe8bqRven2eB7VuhcDUS6ksA5n2O/FglvYqmWf7pp56tvRLdtm
aSEgNOuqGM9x6hCM6vIs11CUmZaNK7FlE4Igu82DgPDQBT87evpheRXYYx7hYrtI
dW78jDY4PYr3cxJcitGNWW2QvgEN1DFSNNNuoOaPgZXlTrZP/qVA85d0jXZc8FgZ
aOo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbzMWFxA0XJaVQb49N3e
1/DTTQ/f3TF4WrDso1YgJn+ohoqAGjYn67FvnIz6m4tRcOeoEoF5ft+q1Wfb5USt
YHVxtK07MxUWX+9HiLBAfEDN9JP9250WSsvUxpnrWos2aekUlRXUwgnVOuwmcFBG
OpiC0NSU+Y36Tac7ln+vSyX60ewxPxjnHCHAkeaggKvqMe5r5IBkCqHfllY7ktl7
8Slb1PFWsiW7Qfgpr46QBKqDgPyrY+3w9Wi580ccTwcS3VFOdNUBivezCaHWXq8e
IncGwlDQSPPMyp0M9bwj3kmD+fCMxe/ltxmpIOKbsUo63MjWh8d88npgopngig4j
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11549955794207973684625864827805816543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp02b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21932326632903456163397543692269299680898394076257316223756332118832698204729356269231711870043300489285106353260815116495478254550502827375464056952389006972316631290916201733393556709963078824328585789008651673980686318682888770993618027606685955284632695580892848137472658135393720950889986831092842437903521237870577084741757362341752808371392974566826117152759704330537741911006641281765745810709198897174937943751165621253176061032109917066552733361977706339937712646394349291149157810947970900537093075952965167733869452252128353838821834767711737848810666425522973834979123872255048395294132530685162187268887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca3c0657272bc878f48010b8330e525f62801f45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2350 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp02b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-rec-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.predom-pp.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.medianacoll.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-assurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.homol.boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifluxvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt-tmp.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-rec-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-tmp.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.finagora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'predom-pp.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfx-rec.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noasis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medianacoll.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol.boxauto.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europagoderec2.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europagoderec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ds-rec1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.is.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvn-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatecard.bnl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-pprod.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-emib.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnppf.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnl.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifluxvie.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apimcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts.ssce.staging.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-ssce.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-ssce-ppd.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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