homo.webadmin.societegenerale.com

- Societe Generale SA -

Issued by QuoVadis Global SSL ICA G3

About this certificate

This digital certificate with serial number 4a:b8:41:52:f3:9f:32:c1:c7:d5:59:05:7d:f7:e9:f8:44:f1:de:c5 was issued on by QuoVadis Limited.

With 75 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Societe Generale SA

Organization: Societe Generale SA
Organization unit: 552120222
State / Province: Île-de-France
Locality: Paris
Country: FR

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:b8:41:52:f3:9f:32:c1:c7:d5:59:05:7d:f7:e9:f8:44:f1:de:c5
Serial Number (int): 426574344683062419033883834760456411679363817157
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: dd:ff:5e:0b:22:aa:6c:0e:08:24:eb:f7:05:cb:7e:fc:2a:b6:df:4d
AuthorityKeyId: b3:12:89:b5:a9:4b:35:bc:15:00:f0:80:e9:d8:78:87:f1:13:7c:76

Fingerprint (sha1): 75:ad:d7:e7:d9:3c:4d:11:01:0d:fe:63:ae:0c:4d:33:ea:d7:47:91
Fingerprint (sha256): 24:85:32:43:ba:cd:65:60:5d:fb:73:9c:70:9a:53:32:25:ef:88:5c:f6:65:7e:23:e4:eb:cc:81:19:01:e8:b5

Issuing Certificate URL: http://trust.quovadisglobal.com/qvsslg3.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvsslg3.crl

Check the revocation status for certificate homo.webadmin.societegenerale.com

75

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for homo.webadmin.societegenerale.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

homo.webadmin.societegenerale.com
dev.webapi.societegenerale.com
dev.mea.societegenerale.com
homo.factoring.societegenerale.com
homo.societegenerale.ch
dev.factoring.societegenerale.com
dev.sg29haussmann.societegenerale.fr
dev.sgildisclosure.societegenerale.com
homo.help-guidelines.societegenerale.com
dev.africa-technologies-services.sgcib.com
homo.webapi.societegenerale.com
homo.sg29haussmann.societegenerale.fr
dev.societegenerale.ch
dev.webadmin.societegenerale.com
homo.sgss.societegenerale.com
homo.globalsolution.societegenerale.com
homo.pee.credit-du-nord.fr
homo.societegenerale.de
homo.societegenerale.co.uk
homo.wholesale.banking.societegenerale.com
dev.sgasdisclosure.com
homo.cib.societegenerale.com
homo.societegenerale.lu
dev.sustainable-finance.societegenerale.com
homo.americas.societegenerale.com
dev.societegenerale.com.tr
homo.sgildisclosure.societegenerale.com
homo.sgasdisclosure.com
dev.sibos.societegenerale.com
homo.privatebanking.societegenerale.com
dev.societegenerale.de
dev.societegenerale.asia
dev.societegenerale.lu
dev.pee.credit-du-nord.fr
dev.americas.societegenerale.com
homo.capitalpartenaires.societegenerale.com
dev.global.societegenerale.com
dev.globalsolution.societegenerale.com
homo.kleinworthambros.com
dev.privatebanking.societegenerale.com
homo.societegenerale.com.tr
homo.www.esalia.com
homo.sgbt.lu
homo.sgpwm.societegenerale.com
dev.sgpwm.societegenerale.com
homo.societegenerale.it
homo.global.societegenerale.com
homo.societegenerale.es
homo.sustainable-finance.societegenerale.com
homo.cib.societegenerale.pl
dev.societegenerale.co.uk
dev.sgbt.lu
homo.societegenerale.nl
homo.societegenerale.asia
dev.societegenerale.it
dev.societegenerale.es
homo.rfp-sgss.societegenerale.com
dev.sgss.societegenerale.com
dev.manco.securities-services.societegenerale.com
dev.cib.societegenerale.pl
dev.factoring.societegenerale.it
homo.manco.securities-services.societegenerale.com
dev.www.esalia.com
dev.capitalpartenaires.societegenerale.com
dev.wholesale.banking.societegenerale.com
homo.factoring.societegenerale.it
dev.help-guidelines.societegenerale.com
dev.societegenerale.nl
dev.rfp-sgss.societegenerale.com
dev.kleinworthambros.com
homo.africa-technologies-services.sgcib.com
redmine.societegenerale.com
dev.cib.societegenerale.com
homo.mea.societegenerale.com
homo.sibos.societegenerale.com

Other certificates including the domain name societegenerale.com

(limited to 100 certificates)
h2-imap.societegenerale.com
partners-api.bsc.societegenerale.com
ceros3.map.fastly.net
warrantspushserver.societegenerale.com
parlons-auto.societegenerale.com
cash2business.factoring.societegenerale.com
infact.factoring.societegenerale.fr
jazz-ou-sobrio.societegenerale.com
demo-sgw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
hsharinbox.societegenerale.com
itsat.societegenerale.com
taleo.exit.societegenerale.com
document-de-reference.societegenerale.com
pre1.ebanking.privatebanking.societegenerale.com
privatebanking.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
sso-sogecashweb.societegenerale.com
chatbotrcf.assurances.societegenerale.com
gesop-subscribe.societegenerale.com
webclear.societegenerale.com
filetransfer.hpr.tomf.societegenerale.com
careers.socgen.com
sni.cloudflaressl.com
suite3.securitiesservices.societegenerale.com
homowebclear.societegenerale.com
hsharinbox.societegenerale.com
careers.societegenerale.com
unified-access.societegenerale.com
sgnews.societegenerale.com
san-004.ceros.com
sni.cloudflaressl.com
h-esign.societegenerale.com
coxetnel-oeuffactory.societegenerale.com
seasonsgreetings.societegenerale.com
linstantprive.privatebanking.societegenerale.com
assurances.societegenerale.com
www.equipmentfinance.societegenerale.com
factoring.societegenerale.com
h-taleo.exit.societegenerale.com
www.blackbird.societegenerale.com
ambassadorsday.societegenerale.com
assurances.societegenerale.com
homo.webadmin.societegenerale.com
h-partners-api.bsc.societegenerale.com
homowebsight.societegenerale.com
sni.cloudflaressl.com
*.pinterestceros.com
ceros3.map.fastly.net
sourcing-hub-reporting.societegenerale.com
h-lamatinale.societegenerale.com
san-004.ceros.com
monsieurmadame.societegenerale.com
san-004.ceros.com
hob-isis.societegenerale.com
netkin.eu
Nouveauxmodeles.societegenerale.com
sf-webtocase.societegenerale.com
sogecash-ebics.societegenerale.com
appliactionnaire.societegenerale.com
login.securitiesservices.societegenerale.com
ambassadorsday.societegenerale.com
portail-pca.factoring.societegenerale.com
infact.factoring.societegenerale.fr
san-004.ceros.com
swordphish.cert.societegenerale.com
apps.bsc.aws.societegenerale.com
www.scf-servicing-hom.societegenerale.com
h2-imap.societegenerale.com
immsituadmin.societegenerale.com
careers.socgen.com
getready.societegenerale.com
www.soactif.societegenerale.com
carte-bancaire-gratuite.societegenerale.com
cert.societegenerale.com
innovshare.societegenerale.com
ceros3.map.fastly.net
projects.societegenerale.com
www.scf-servicing.societegenerale.com
suite3.securitiesservices.societegenerale.com
sso-sogecashweb.societegenerale.com
live.societegenerale.com
homo-login.securitiesservices.societegenerale.com
h-unified-access.societegenerale.com
san-004.ceros.com
www.equipmentfinance.societegenerale.com
reglement.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
h-report.vip.equipmentfinance.societegenerale.com
activation.caff.societegenerale.com
jazz-ou-sobrio.societegenerale.com
sni.cloudflaressl.com
dublinportal.societegenerale.com
boxallinclusive.societegenerale.com
ceros3.map.fastly.net
hfilegtw.societegenerale.com
ceros3.map.fastly.net
ceros3.map.fastly.net
seasonsgreetings.societegenerale.com

Certificate

The complete raw certificate details for homo.webadmin.societegenerale.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxKTkOQhMfAdptuilui4R
lBAdVQPE+ritmmECOlLobUNF+g3UdpZDb4b+6OzXipoSUe+V3WaCJfPMt84nSvoS
lE9aqkyvvFIehybxUxKvW0oOZPcE4jSw3nuRBMIdOoJysECNXtNjBretUIvC26lm
IYIs+Zz3uUUr51puGDdPB0uDXjVKfzHEpi4ZpOx09cnWGCGG6gSYgV0gNTn1WG/m
GjOrI4Bap2oTD533mamRUV3IFjJ7hZvWbV1M8WDBIh6xSvaJ6E/+YlmJ4IDprbwc
kogu/Z7T3SOCfSb2Ofubb/8bKjtWU8p6FVbxLg3aW1J1UHuNPIMdNKZ5rAhvoJ2J
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 426574344683062419033883834760456411679363817157
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Global SSL ICA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-02 09:52:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-02 10:02:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Societe Generale SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '552120222'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'homo.webadmin.societegenerale.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24824018800156576650777882961433483011211223145633145360557407208197605806246305003466605497231768107477782372659333557449817627377207356428316570589715978996884062307993947299845200730532172810099039535375049525298045589478805892011943317358337027525887876827247941817247126703061437494632535471330007360385984493353530108091593372882495278102756877232330695534064961122286315183373309296170853193514545470855397962333401935799399942832917335206118924765236535254314457525317328903918464404675128436785646768866231581227480315268791447282187765353927350763745176291272465629967827049601414399515961955167818714286479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b31289b5a94b35bc1500f080e9d87887f1137c76
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvsslg3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2418 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.webadmin.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.webapi.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mea.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.factoring.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.factoring.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sg29haussmann.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sgildisclosure.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.help-guidelines.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.africa-technologies-services.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.webapi.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sg29haussmann.societegenerale.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.webadmin.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sgss.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.globalsolution.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.pee.credit-du-nord.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.wholesale.banking.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sgasdisclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.cib.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sustainable-finance.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.americas.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sgildisclosure.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sgasdisclosure.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sibos.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.privatebanking.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.pee.credit-du-nord.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.americas.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.capitalpartenaires.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.global.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.globalsolution.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.kleinworthambros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.privatebanking.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.com.tr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.www.esalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sgbt.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sgpwm.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sgpwm.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.global.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sustainable-finance.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.cib.societegenerale.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sgbt.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.societegenerale.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.rfp-sgss.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.sgss.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.manco.securities-services.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cib.societegenerale.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.factoring.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.manco.securities-services.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.www.esalia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.capitalpartenaires.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.wholesale.banking.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.factoring.societegenerale.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.help-guidelines.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.societegenerale.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.rfp-sgss.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.kleinworthambros.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.africa-technologies-services.sgcib.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'redmine.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.cib.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.mea.societegenerale.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homo.sibos.societegenerale.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvsslg3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ddff5e0b22aa6c0e0824ebf705cb7efc2ab6df4d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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