demo.iam.ere.bnpparibas
- BNP PARIBAS SA -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 7c:c8:c7:f8:03:97:c6:b3:a5:6d:2d:c2:b3:36:79:02 was issued on by Entrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
BNP PARIBAS SA
Organization:
BNP PARIBAS SA
Locality:
Montreuil
Country: FR
Country: FR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 7c:c8:c7:f8:03:97:c6:b3:a5:6d:2d:c2:b3:36:79:02Serial Number (int): 165866786698243905156425139140802541826
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 26:7e:38:af:00:3a:b5:7a:06:a6:42:3c:1d:b1:82:96:cd:18:c5:14
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 8e:41:d2:9f:df:04:d6:3c:a4:fc:c7:bd:e4:f0:70:82:cd:ac:bf:20
Fingerprint (sha256): 1a:88:f3:1a:64:30:0e:97:7c:2e:f3:1b:15:75:ee:58:aa:95:e0:f1:43:85:eb:90:39:27:0d:bc:73:1e:7b:19
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate demo.iam.ere.bnpparibas
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for demo.iam.ere.bnpparibas
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
demo.iam.ere.bnpparibas
www.demo.iam.ere.bnpparibas
www.demo.iam.ere.bnpparibas
Other certificates including the domain name ere.bnpparibas
(limited to 100 certificates)
entreprises.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
monepargne.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
demo.iam.ere.bnpparibas
monepargne.ere.bnpparibas
monepargne.ere.bnpparibas
pewee.ere.bnpparibas
epargne-retraite-entreprises.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
preview-monepargne-mee.ere.bnpparibas
login-entreprises.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
iam.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
epargne-retraite-entreprises.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
oak-extranet-op.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
monepargne.ere.bnpparibas
oak-extranet-op.ere.bnpparibas
bnp08s.bnpparibas.com
demo.iam.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
login-entreprises.ere.bnpparibas
bnp08s.bnpparibas.com
transferflow.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
monepargne.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
demo.iam.ere.bnpparibas
monepargne.ere.bnpparibas
monepargne.ere.bnpparibas
pewee.ere.bnpparibas
epargne-retraite-entreprises.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
preview-monepargne-mee.ere.bnpparibas
login-entreprises.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
iam.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
epargne-retraite-entreprises.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
oak-extranet-op.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
monepargne.ere.bnpparibas
oak-extranet-op.ere.bnpparibas
bnp08s.bnpparibas.com
demo.iam.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
pewee.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
login-entreprises.ere.bnpparibas
bnp08s.bnpparibas.com
transferflow.ere.bnpparibas
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
Certificate
The complete raw certificate details for demo.iam.ere.bnpparibas in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIQfMjH+AOXxrOlbS3CszZ5AjANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y NDAyMDExNDU0MTdaFw0yNTAyMDExNDU0MTZaMFwxCzAJBgNVBAYTAkZSMRIwEAYD VQQHEwlNb250cmV1aWwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMSAwHgYDVQQD ExdkZW1vLmlhbS5lcmUuYm5wcGFyaWJhczCCAiIwDQYJKoZIhvcNAQEBBQADggIP ADCCAgoCggIBALiSQzTAiO8AnjfpCP1LeUOl1L9cQLr7/5ta1NJF4e1pPIjL9Rei e/2hPMaLVBnnwfHnvlwgCVqOsv7AQEm68QNfNcVlvoHV2M1Gpmt/ZBbqmFmJTrMu mYqfEfF8oTPtLGsPR7dYgYQzQ/bFe8A81phi5TDDEAy+0VYDEJSmJ+3XGAuR6QfV ZqmK6mui8CH8EKBaNxA8Q1BhNd8ju9howhNbFvGLCexTCZt92zRiHG4aOU0GtBT/ wgbiDROdioqb16z8NTICJV41bTq6Pcx/QOJ4Jq+YtkwbK30c1+Ad9KBk2rwdx0U1 vDooxCSBZdCzae5RulNW6d92rptP3FZl+4VFAB+ykd2xTXEdTi3a8QzsgKDN541L GO4yy46RG60w9LqUzdSM5OiUZPt4FXRwKrgEL8kDzcnV5iETsSY5drBSFheE7vkc bFNjNC6J3LWPwW1PXkCRMYnE7EIO8jcs+fNJfgBDrJSOgHrgptxvyAmw5Kb1dr9+ 5bS+E5abE80BwuTXsXU3HOt/XBOUaq+IJKPgEUuQs5kNvsGPw+V8dYuZIIEVGRJz NPAWMYwAP5yR2GScAJd9B/nHmXfFixjMRu56QDlJQ98AvX5GHOKVPFJ1pXzG5spV woHwqbTZP+B10Cqg6Y48iyGc1zi38xr82ocUaPHRMIjrZ2quN7K58hKzAgMBAAGj ggGLMIIBhzAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQmfjivADq1egamQjwdsYKW zRjFFDAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcB AQRcMFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsG AQUFBzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIw MwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFr LmNybDA/BgNVHREEODA2ghdkZW1vLmlhbS5lcmUuYm5wcGFyaWJhc4Ibd3d3LmRl bW8uaWFtLmVyZS5ibnBwYXJpYmFzMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAU BggrBgEFBQcDAQYIKwYBBQUHAwIwEwYDVR0gBAwwCjAIBgZngQwBAgIwEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAGbynIsoSTBJAzSrpHk0 1d38lnytEwrf3iF0aQyMUTutuW3lIrh/Qsx2JEsvu+1kO2kqy8VKz/g4IHzzyDQ2 U0SYnAu3gk9pnZMG/o7HRo6YvydaqPPxshchPAtNq7JbmJbP7qKkNiX6UI5pB0xc EO0FGw/Cfg9qC+RGBjFlZwVaMKbG28BZBHNN7qesS3swf1/8TyyZEoWYEDiVodXH lT+HTlBpOGJ4Yv0olsm0dWyvy7Y8JbSvYgN8vOifhyeRNoN+fXLV9csQq93b28y3 eqrGGdg07kO4OURaLlEBZ+6wyxwEoSIyKqoPArED+8WrkyNTpvvxEx1Hv5E7JRQf nMs= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuJJDNMCI7wCeN+kI/Ut5 Q6XUv1xAuvv/m1rU0kXh7Wk8iMv1F6J7/aE8xotUGefB8ee+XCAJWo6y/sBASbrx A181xWW+gdXYzUama39kFuqYWYlOsy6Zip8R8XyhM+0saw9Ht1iBhDND9sV7wDzW mGLlMMMQDL7RVgMQlKYn7dcYC5HpB9VmqYrqa6LwIfwQoFo3EDxDUGE13yO72GjC E1sW8YsJ7FMJm33bNGIcbho5TQa0FP/CBuINE52KipvXrPw1MgIlXjVtOro9zH9A 4ngmr5i2TBsrfRzX4B30oGTavB3HRTW8OijEJIFl0LNp7lG6U1bp33aum0/cVmX7 hUUAH7KR3bFNcR1OLdrxDOyAoM3njUsY7jLLjpEbrTD0upTN1Izk6JRk+3gVdHAq uAQvyQPNydXmIROxJjl2sFIWF4Tu+RxsU2M0LonctY/BbU9eQJExicTsQg7yNyz5 80l+AEOslI6AeuCm3G/ICbDkpvV2v37ltL4TlpsTzQHC5NexdTcc639cE5Rqr4gk o+ARS5CzmQ2+wY/D5Xx1i5kggRUZEnM08BYxjAA/nJHYZJwAl30H+ceZd8WLGMxG 7npAOUlD3wC9fkYc4pU8UnWlfMbmylXCgfCptNk/4HXQKqDpjjyLIZzXOLfzGvza hxRo8dEwiOtnaq43srnyErMCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 165866786698243905156425139140802541826 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-01 14:54:17 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-01 14:54:16 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'demo.iam.ere.bnpparibas' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752985364129441748003217442361238897948300923216334402531540471350879969313527018553745520770636568212884740715392007120773587061521746647239224173887863512271488514756605070478829756390926750667509662896041480803238901822267575080317847636650858155858800154198675848431442229412456227122524260073547925255795139844665589159347527794426000421379240522411607895499827211973240802553123273313768269825410569731321829493224423007762514011239793396081798429018803834132702529244762096947719077978851200204448387643931381727009074610000924106795234230019899238174378383971519943508143996385896639603632726686370091130221770671248377519840730950629863515655169773164038129960555261486212860920910767892049850597090981561933616918443559107990700389446957379101998796324475875219728632646723823898287857005098572998951098786226853050484908754611153511418122048217471093335077577795489234730199613256595316908231504536070725005033213960714652093567895375295317214609473540327013595938054923614643804723442138930428116505477987994001249004370286527814202876216880755963048906795326785017505434192646254548663984292827269009853910075576835011772525700347578787486597965023806465019715415203468091951054792673661691365974703360000585571109049011 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 267e38af003ab57a06a6423c1db18296cd18c514 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo.iam.ere.bnpparibas' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.demo.iam.ere.bnpparibas' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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