c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:c9:ad:11:96:63:df:f4:23:0e:cd:d2:10:83:41:4b was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:c9:ad:11:96:63:df:f4:23:0e:cd:d2:10:83:41:4b
Serial Number (int): 18327125864053093903162228766668964171
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 1a:72:77:a3:0b:c8:d6:dc:b2:89:d0:42:e2:8c:5f:29:e6:fb:16:5e
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 96:92:29:e4:16:53:8a:07:dc:21:5a:41:b9:c6:bf:67:06:eb:25:0b
Fingerprint (sha256): 26:69:de:08:8f:de:ad:ba:a9:19:cd:b9:f5:6e:39:a4:dd:fe:bd:79:53:d4:20:90:c4:08:98:16:45:b8:eb:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com
1-cortexplus-pp.bnpparibas.com
1-cortexplus.bnpparibas.com
1-globalmarkets-pp.bnpparibas.com
1-globalmarkets.bnpparibas.com
1-markets360-pp.bnpparibas.com
1-markets360.bnpparibas.com
1-origin-cortexplus.bnpparibas.com
2-cortexplus-pp.bnpparibas.com
2-cortexplus.bnpparibas.com
2-globalmarkets-pp.bnpparibas.com
2-globalmarkets.bnpparibas.com
2-markets360-pp.bnpparibas.com
2-markets360.bnpparibas.com
2-origin-cortexplus.bnpparibas.com
aeat.cash-cib.bnpparibas.es
affaires-publiques.bnpparibas
affaires-publiques.bnpparibas.com
alis.bnpparibas.com
apac.bnpparibas
apac.bnpparibas.com
bnpparibas.at
bnpparibas.be
bnpparibas.bg
bnpparibas.ca
bnpparibas.cn
bnpparibas.co.kr
bnpparibas.co.th
bnpparibas.com.au
bnpparibas.com.cn
bnpparibas.com.co
bnpparibas.com.my
bnpparibas.com.sg
bnpparibas.de
bnpparibas.dk
bnpparibas.es
bnpparibas.org.cn
cfd-support.bbva.bnpparibas.com
chile.bnpparibas.com
china.bnpparibas.com
china.bnpparibas.com.cn
compliance-notifications.bnpparibas.com
connexis-guarantee.bnpparibas.com
cortexfx.bnpparibas.com
dam.bnpparibas.com
democfd-support.bbva.bnpparibas.com
economieetentreprise.bnpparibas
economieetentreprises.bnpparibas
eqdpo.bnpparibas.com
flexsimmo.imex.bnpparibas.fr
indices-globalmarkets.bnpparibas.com
invest.bnpparibas.com
neobonds.bnpparibas
neobonds.staging.bnpparibas
precfd-support.bbva.bnpparibas.com
quotetransparency-pp.bnpparibas.com
quotetransparency.bnpparibas.com
surveys.bnpparibas.com
tokenauth-cib-stg.bnpparibas.com
try-cfd.bnpparibas.com
vietnam.bnpparibas.com
www.aeat.cash-cib.bnpparibas.es
www.affaires-publiques.bnpparibas.com
www.apac.bnpparibas
www.apac.bnpparibas.com
www.bnpparibas.at
www.bnpparibas.be
www.bnpparibas.bg
www.bnpparibas.ca
www.bnpparibas.cn
www.bnpparibas.co.kr
www.bnpparibas.co.th
www.bnpparibas.com.au
www.bnpparibas.com.cn
www.bnpparibas.com.co
www.bnpparibas.com.my
www.bnpparibas.com.sg
www.bnpparibas.de
www.bnpparibas.dk
www.bnpparibas.es
www.bnpparibas.org.cn
www.chile.bnpparibas.com
www.china.bnpparibas.com
www.china.bnpparibas.com.cn
www.compliance-notifications.bnpparibas.com
www.economieetentreprise.bnpparibas
www.economieetentreprises.bnpparibas
www.eqdpo.bnpparibas.com
www.indices-globalmarkets.bnpparibas.com
www.invest.bnpparibas.com
www.quotetransparency-pp.bnpparibas.com
www.quotetransparency.bnpparibas.com
www.vietnam.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com

Certificate

The complete raw certificate details for c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPtjCCDp6gAwIBAgIQDcmtEZZj3/QjDs3SEINBSzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzA3MTEwMDAwMDBa
Fw0yNDA1MjkyMzU5NTlaMIGOMQswCQYDVQQGEwJGUjEXMBUGA1UECAwOw45sZS1k
ZS1GcmFuY2UxEjAQBgNVBAcTCU1PTlRSRVVJTDEXMBUGA1UEChMOQk5QIFBBUklC
QVMgU0ExOTA3BgNVBAMTMGMwMGYwYzQ2NzViOTFmYjhiOTE4ZTQwNzlhMGIxYmFj
MS5ibnBwYXJpYmFzLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABMQ8Jh9j
sZK86QjN1YqfcNKBkM8xHoPjlwkrueqipLdDO1e9D6Y6vDVbp8Lft3yFTbpxjN+L
yPBPkB/ELc816lmjgg0XMIINEzAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLF
lXa59DAdBgNVHQ4EFgQUGnJ3owvI1tyyidBC4oxfKeb7Fl4wggm/BgNVHREEggm2
MIIJsoIwYzAwZjBjNDY3NWI5MWZiOGI5MThlNDA3OWEwYjFiYWMxLmJucHBhcmli
YXMuY29tgh4xLWNvcnRleHBsdXMtcHAuYm5wcGFyaWJhcy5jb22CGzEtY29ydGV4
cGx1cy5ibnBwYXJpYmFzLmNvbYIhMS1nbG9iYWxtYXJrZXRzLXBwLmJucHBhcmli
YXMuY29tgh4xLWdsb2JhbG1hcmtldHMuYm5wcGFyaWJhcy5jb22CHjEtbWFya2V0
czM2MC1wcC5ibnBwYXJpYmFzLmNvbYIbMS1tYXJrZXRzMzYwLmJucHBhcmliYXMu
Y29tgiIxLW9yaWdpbi1jb3J0ZXhwbHVzLmJucHBhcmliYXMuY29tgh4yLWNvcnRl
eHBsdXMtcHAuYm5wcGFyaWJhcy5jb22CGzItY29ydGV4cGx1cy5ibnBwYXJpYmFz
LmNvbYIhMi1nbG9iYWxtYXJrZXRzLXBwLmJucHBhcmliYXMuY29tgh4yLWdsb2Jh
bG1hcmtldHMuYm5wcGFyaWJhcy5jb22CHjItbWFya2V0czM2MC1wcC5ibnBwYXJp
YmFzLmNvbYIbMi1tYXJrZXRzMzYwLmJucHBhcmliYXMuY29tgiIyLW9yaWdpbi1j
b3J0ZXhwbHVzLmJucHBhcmliYXMuY29tghthZWF0LmNhc2gtY2liLmJucHBhcmli
YXMuZXOCHWFmZmFpcmVzLXB1YmxpcXVlcy5ibnBwYXJpYmFzgiFhZmZhaXJlcy1w
dWJsaXF1ZXMuYm5wcGFyaWJhcy5jb22CE2FsaXMuYm5wcGFyaWJhcy5jb22CD2Fw
YWMuYm5wcGFyaWJhc4ITYXBhYy5ibnBwYXJpYmFzLmNvbYINYm5wcGFyaWJhcy5h
dIINYm5wcGFyaWJhcy5iZYINYm5wcGFyaWJhcy5iZ4INYm5wcGFyaWJhcy5jYYIN
Ym5wcGFyaWJhcy5jboIQYm5wcGFyaWJhcy5jby5rcoIQYm5wcGFyaWJhcy5jby50
aIIRYm5wcGFyaWJhcy5jb20uYXWCEWJucHBhcmliYXMuY29tLmNughFibnBwYXJp
YmFzLmNvbS5jb4IRYm5wcGFyaWJhcy5jb20ubXmCEWJucHBhcmliYXMuY29tLnNn
gg1ibnBwYXJpYmFzLmRlgg1ibnBwYXJpYmFzLmRrgg1ibnBwYXJpYmFzLmVzghFi
bnBwYXJpYmFzLm9yZy5jboIfY2ZkLXN1cHBvcnQuYmJ2YS5ibnBwYXJpYmFzLmNv
bYIUY2hpbGUuYm5wcGFyaWJhcy5jb22CFGNoaW5hLmJucHBhcmliYXMuY29tghdj
aGluYS5ibnBwYXJpYmFzLmNvbS5jboInY29tcGxpYW5jZS1ub3RpZmljYXRpb25z
LmJucHBhcmliYXMuY29tgiFjb25uZXhpcy1ndWFyYW50ZWUuYm5wcGFyaWJhcy5j
b22CF2NvcnRleGZ4LmJucHBhcmliYXMuY29tghJkYW0uYm5wcGFyaWJhcy5jb22C
I2RlbW9jZmQtc3VwcG9ydC5iYnZhLmJucHBhcmliYXMuY29tgh9lY29ub21pZWV0
ZW50cmVwcmlzZS5ibnBwYXJpYmFzgiBlY29ub21pZWV0ZW50cmVwcmlzZXMuYm5w
cGFyaWJhc4IUZXFkcG8uYm5wcGFyaWJhcy5jb22CHGZsZXhzaW1tby5pbWV4LmJu
cHBhcmliYXMuZnKCJGluZGljZXMtZ2xvYmFsbWFya2V0cy5ibnBwYXJpYmFzLmNv
bYIVaW52ZXN0LmJucHBhcmliYXMuY29tghNuZW9ib25kcy5ibnBwYXJpYmFzghtu
ZW9ib25kcy5zdGFnaW5nLmJucHBhcmliYXOCInByZWNmZC1zdXBwb3J0LmJidmEu
Ym5wcGFyaWJhcy5jb22CI3F1b3RldHJhbnNwYXJlbmN5LXBwLmJucHBhcmliYXMu
Y29tgiBxdW90ZXRyYW5zcGFyZW5jeS5ibnBwYXJpYmFzLmNvbYIWc3VydmV5cy5i
bnBwYXJpYmFzLmNvbYIgdG9rZW5hdXRoLWNpYi1zdGcuYm5wcGFyaWJhcy5jb22C
FnRyeS1jZmQuYm5wcGFyaWJhcy5jb22CFnZpZXRuYW0uYm5wcGFyaWJhcy5jb22C
H3d3dy5hZWF0LmNhc2gtY2liLmJucHBhcmliYXMuZXOCJXd3dy5hZmZhaXJlcy1w
dWJsaXF1ZXMuYm5wcGFyaWJhcy5jb22CE3d3dy5hcGFjLmJucHBhcmliYXOCF3d3
dy5hcGFjLmJucHBhcmliYXMuY29tghF3d3cuYm5wcGFyaWJhcy5hdIIRd3d3LmJu
cHBhcmliYXMuYmWCEXd3dy5ibnBwYXJpYmFzLmJnghF3d3cuYm5wcGFyaWJhcy5j
YYIRd3d3LmJucHBhcmliYXMuY26CFHd3dy5ibnBwYXJpYmFzLmNvLmtyghR3d3cu
Ym5wcGFyaWJhcy5jby50aIIVd3d3LmJucHBhcmliYXMuY29tLmF1ghV3d3cuYm5w
cGFyaWJhcy5jb20uY26CFXd3dy5ibnBwYXJpYmFzLmNvbS5jb4IVd3d3LmJucHBh
cmliYXMuY29tLm15ghV3d3cuYm5wcGFyaWJhcy5jb20uc2eCEXd3dy5ibnBwYXJp
YmFzLmRlghF3d3cuYm5wcGFyaWJhcy5ka4IRd3d3LmJucHBhcmliYXMuZXOCFXd3
dy5ibnBwYXJpYmFzLm9yZy5jboIYd3d3LmNoaWxlLmJucHBhcmliYXMuY29tghh3
d3cuY2hpbmEuYm5wcGFyaWJhcy5jb22CG3d3dy5jaGluYS5ibnBwYXJpYmFzLmNv
bS5jboIrd3d3LmNvbXBsaWFuY2Utbm90aWZpY2F0aW9ucy5ibnBwYXJpYmFzLmNv
bYIjd3d3LmVjb25vbWllZXRlbnRyZXByaXNlLmJucHBhcmliYXOCJHd3dy5lY29u
b21pZWV0ZW50cmVwcmlzZXMuYm5wcGFyaWJhc4IYd3d3LmVxZHBvLmJucHBhcmli
YXMuY29tgih3d3cuaW5kaWNlcy1nbG9iYWxtYXJrZXRzLmJucHBhcmliYXMuY29t
ghl3d3cuaW52ZXN0LmJucHBhcmliYXMuY29tgid3d3cucXVvdGV0cmFuc3BhcmVu
Y3ktcHAuYm5wcGFyaWJhcy5jb22CJHd3dy5xdW90ZXRyYW5zcGFyZW5jeS5ibnBw
YXJpYmFzLmNvbYIad3d3LnZpZXRuYW0uYm5wcGFyaWJhcy5jb20wDgYDVR0PAQH/
BAQDAgeAMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBjwYDVR0fBIGH
MIGEMECgPqA8hjpodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNS
U0FTSEEyNTYyMDIwQ0ExLTQuY3JsMECgPqA8hjpodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTQuY3JsMD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3Nw
LmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2NhY2VydHMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0xLmNydDAJBgNVHRME
AjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYlFT/gMAAAEAwBHMEUCIG5LHr2tWP2aGtzwy5Lf
TLcMeKTbcwhij/nHlLnzlwoxAiEA67ZynxH9Bti7NyJ5P9R2upIh/5gCjOvcB6II
b41XYv4AdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYlFT/ej
AAAEAwBHMEUCICcJ4M4wZV9tAC8iD3t9TziS7jT8JwhtoP65UxEfSDiIAiEA6YOq
ZXE2f2JPKvmri0tZM8e6i9AE2b8zGERRMEHPwloAdwDatr9rP7W2Ip+bwrtca+hw
kXFsu1GEhTS9pD0wSNf7qwAAAYlFT/dwAAAEAwBIMEYCIQCnH+7fImWjQCANk2dL
P9dxbyAfCSQwSlkoUd2B3ezgpgIhANOoV8OHJ/Cx7wwQAju3Y5SGYV2q6yzgqtR/
LQ28E4DKMA0GCSqGSIb3DQEBCwUAA4IBAQAj9k9+9svo7HC/BJgRWRUr4WvoD0Pd
doWtvy2RatWqdhDDa85ZBgN1gJ7bbjUaPKSTEj+dFrLmG6mLY+kLSisvc6NePj9p
ncmqZh0FphWJYepraBZap2x1HKjAyjwsg5ciy3sIiEKV2BaTWNjDUKfQXPAeg2Uc
tvie405ZzeKKzNX1hBSqFKGRIYv6W4e8F8pkbnzvKGN3l6UysHJCKhEXkW3WKmfS
aD7ImXo0V1lxmbGNFpftTIt/bJT6lbhntRgkeHQZWeYc6dNTRoXq0fpob/yTZXHc
8yentY6DoUb9g/BzlFpV9BwK3P9NeEevzWqvdB/lWjvpV1gx2quXHSbe
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAExDwmH2OxkrzpCM3Vip9w0oGQzzEe
g+OXCSu56qKkt0M7V70Ppjq8NVunwt+3fIVNunGM34vI8E+QH8QtzzXqWQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18327125864053093903162228766668964171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c43c261f63b192bce908cdd58a9f70d28190cf311e83e397092bb9eaa2a4b7433b57bd0fa63abc355ba7c2dfb77c854dba718cdf8bc8f04f901fc42dcf35ea59
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1a7277a30bc8d6dcb289d042e28c5f29e6fb165e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'c00f0c4675b91fb8b918e4079a0b1bac1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-markets360.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2-origin-cortexplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexis-guarantee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'democfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flexsimmo.imex.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neobonds.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'precfd-support.bbva.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'surveys.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tokenauth-cib-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'try-cfd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aeat.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.affaires-publiques.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.bg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.co.th'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.org.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chile.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.china.bnpparibas.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.compliance-notifications.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprise.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economieetentreprises.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eqdpo.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.indices-globalmarkets.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.invest.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quotetransparency.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vietnam.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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