bnp08s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:7b:30:52:71:17:70:2d:96:a6:25:26:e2:cb:08:32 was issued on by DigiCert Inc.

With 85 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:7b:30:52:71:17:70:2d:96:a6:25:26:e2:cb:08:32
Serial Number (int): 16590368550389216872679066665403222066
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:9f:d6:15:49:79:f8:0d:d0:4c:d3:ef:23:04:13:e9:4b:17:30:17
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 23:80:47:97:4c:b1:5c:d3:dd:ab:75:d9:5d:0e:b3:e6:c6:8a:db:88
Fingerprint (sha256): 26:87:2a:82:7a:30:cb:cb:5a:48:a4:c2:d0:ae:e0:3e:a4:dc:7f:bf:0a:56:95:2d:0f:ae:3d:26:8b:c6:73:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp08s.bnpparibas.com

85

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp08s.bnpparibas.com
agora-prd.bnpparibas.com
alis.v16.dev.staging.bnpparibas
antilles-guyane.bnpparibas
assinaturadigital.bnpparibas.com.br
b2ctest.ecredit.it
bicibourse.com
bnppam-private.staging.bnpparibas.com
bnpparibas.nc
bnpparibas.re
boleto.bnpparibas.com.br
car.bnpparibas-am.com
central.antilles-guyane.bnpparibas
compliance.preprod.staging.api.bnpparibas
compliance.staging.api.bnpparibas
creditclick.fr
cts-lra.bnpparibas.com
demo-directeo.epargne-retraite-entreprises.bnpparibas.com
demo-personeo.epargne-retraite-entreprises.bnpparibas.com
dev.bwelcome.hr.bnpparibas
directeo.epargne-retraite-entreprises.bnpparibas.com
documentexchangeconnect-internet.sso-stg.bnpparibas.com
documentexchangeconnect.bnpparibas.com
ebroker.sygmabnpparibas-pf.com
ereceipt2centric-cn.asia.bnpparibas.com
ereceipt2centric-in.asia.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
ereporting.asia.bnpparibas.com
fmop-apac.bnpparibas.com
fxpb-dr.bnpparibas.com
fxpb.staging.bnpparibas.com
ges-pb.bnpparibas.com
ges.bnpparibas.com
hr.group.api.staging.bnpparibas
irb-central.bnpparibas.com
jss.bnpparibas
Link2Portal.bnpparibas.com
media.youmanist.bnl.it
media.youmanist.it
mediana.ifitalia.it
mobile.personeo.epargne-retraite-entreprises.bnpparibas.com
monitor.primebroker.com
myfpx.bnpparibas.com
ofpf-assistance.fr
oms-uat.primebroker.com
personeo.epargne-retraite-entreprises.bnpparibas.com
portail-aep.fr
portaldigital.bnpparibas.com.br
private.staging.bnpparibas-am.com
professionalbanking-wealthmanagement-staging.bnpparibas.com
rapport-sustainability.bnpparibas-am.com
recebiveis-stg.bnpparibas.com.br
recebiveis.bnpparibas.com
sgrboletoissuance-stg.bnpparibas.com.br
ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com
staging.bwelcome.hr.bnpparibas
staging.workspace.realestate.bnpparibas.com
stgges.bnpparibas.com
sustainability-report.bnpparibas-am.com
sygmabnpparibas-pf.com
thailandsocialsecurity.bnpparibas.com
thailandsocialsecurity.staging.bnpparibas.com
us-issuing.paying.rec.bnpparibas.com
usissuingandpaying.bnpparibas.com
vra.bnpparibas.com
wealthmanagement-staging.bnpparibas
wealthmanagement-staging.bnpparibas.com
www.antilles-guyane.bnpparibas
www.assinaturadigital.bnpparibas.com.br
www.bicibourse.com
www.bnpparibas.nc
www.bnpparibas.re
www.central.antilles-guyane.bnpparibas
www.creditclick.fr
www.cts-lra.bnpparibas.com
www.dev.bwelcome.hr.bnpparibas
www.hr.group.api.staging.bnpparibas
www.irb-central.bnpparibas.com
www.mediana.ifitalia.it
www.ofpf-assistance.fr
www.portail-aep.fr
www.portaldigital.bnpparibas.com.br
www.rapport-sustainability.bnpparibas-am.com
www.staging.bwelcome.hr.bnpparibas
www.sustainability-report.bnpparibas-am.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp08s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQsjCCD5qgAwIBAgIQDHswUnEXcC2WpiUm4ssIMjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMjIwMDAwMDBa
Fw0yNDAzMjYyMzU5NTlaMHMxCzAJBgNVBAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRl
LUZyYW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJB
UyBTQTEeMBwGA1UEAxMVYm5wMDhzLmJucHBhcmliYXMuY29tMFkwEwYHKoZIzj0C
AQYIKoZIzj0DAQcDQgAEWt3w3CjIp+nwbt6ceXzRW+j5xmq8xblOg2S6lHR+VK6o
dCvRQKHHfx7qEr9o4CjqWgK+QwPrYJGr0A7scGYlRKOCDi8wgg4rMB8GA1UdIwQY
MBaAFLdrouqoqoSMeeq02g+YssWVdrn0MB0GA1UdDgQWBBSDn9YVSXn4DdBM0+8j
BBPpSxcwFzCCCtcGA1UdEQSCCs4wggrKghVibnAwOHMuYm5wcGFyaWJhcy5jb22C
GGFnb3JhLXByZC5ibnBwYXJpYmFzLmNvbYIfYWxpcy52MTYuZGV2LnN0YWdpbmcu
Ym5wcGFyaWJhc4IaYW50aWxsZXMtZ3V5YW5lLmJucHBhcmliYXOCI2Fzc2luYXR1
cmFkaWdpdGFsLmJucHBhcmliYXMuY29tLmJyghJiMmN0ZXN0LmVjcmVkaXQuaXSC
DmJpY2lib3Vyc2UuY29tgiVibnBwYW0tcHJpdmF0ZS5zdGFnaW5nLmJucHBhcmli
YXMuY29tgg1ibnBwYXJpYmFzLm5jgg1ibnBwYXJpYmFzLnJlghhib2xldG8uYm5w
cGFyaWJhcy5jb20uYnKCFWNhci5ibnBwYXJpYmFzLWFtLmNvbYIiY2VudHJhbC5h
bnRpbGxlcy1ndXlhbmUuYm5wcGFyaWJhc4IpY29tcGxpYW5jZS5wcmVwcm9kLnN0
YWdpbmcuYXBpLmJucHBhcmliYXOCIWNvbXBsaWFuY2Uuc3RhZ2luZy5hcGkuYm5w
cGFyaWJhc4IOY3JlZGl0Y2xpY2suZnKCFmN0cy1scmEuYm5wcGFyaWJhcy5jb22C
OWRlbW8tZGlyZWN0ZW8uZXBhcmduZS1yZXRyYWl0ZS1lbnRyZXByaXNlcy5ibnBw
YXJpYmFzLmNvbYI5ZGVtby1wZXJzb25lby5lcGFyZ25lLXJldHJhaXRlLWVudHJl
cHJpc2VzLmJucHBhcmliYXMuY29tghpkZXYuYndlbGNvbWUuaHIuYm5wcGFyaWJh
c4I0ZGlyZWN0ZW8uZXBhcmduZS1yZXRyYWl0ZS1lbnRyZXByaXNlcy5ibnBwYXJp
YmFzLmNvbYI3ZG9jdW1lbnRleGNoYW5nZWNvbm5lY3QtaW50ZXJuZXQuc3NvLXN0
Zy5ibnBwYXJpYmFzLmNvbYImZG9jdW1lbnRleGNoYW5nZWNvbm5lY3QuYm5wcGFy
aWJhcy5jb22CHmVicm9rZXIuc3lnbWFibnBwYXJpYmFzLXBmLmNvbYInZXJlY2Vp
cHQyY2VudHJpYy1jbi5hc2lhLmJucHBhcmliYXMuY29tgidlcmVjZWlwdDJjZW50
cmljLWluLmFzaWEuYm5wcGFyaWJhcy5jb22CJGVyZWNlaXB0MmNlbnRyaWMuYXNp
YS5ibnBwYXJpYmFzLmNvbYIeZXJlcG9ydGluZy5hc2lhLmJucHBhcmliYXMuY29t
ghhmbW9wLWFwYWMuYm5wcGFyaWJhcy5jb22CFmZ4cGItZHIuYm5wcGFyaWJhcy5j
b22CG2Z4cGIuc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIVZ2VzLXBiLmJucHBhcmli
YXMuY29tghJnZXMuYm5wcGFyaWJhcy5jb22CH2hyLmdyb3VwLmFwaS5zdGFnaW5n
LmJucHBhcmliYXOCGmlyYi1jZW50cmFsLmJucHBhcmliYXMuY29tgg5qc3MuYm5w
cGFyaWJhc4IaTGluazJQb3J0YWwuYm5wcGFyaWJhcy5jb22CFm1lZGlhLnlvdW1h
bmlzdC5ibmwuaXSCEm1lZGlhLnlvdW1hbmlzdC5pdIITbWVkaWFuYS5pZml0YWxp
YS5pdII7bW9iaWxlLnBlcnNvbmVvLmVwYXJnbmUtcmV0cmFpdGUtZW50cmVwcmlz
ZXMuYm5wcGFyaWJhcy5jb22CF21vbml0b3IucHJpbWVicm9rZXIuY29tghRteWZw
eC5ibnBwYXJpYmFzLmNvbYISb2ZwZi1hc3Npc3RhbmNlLmZyghdvbXMtdWF0LnBy
aW1lYnJva2VyLmNvbYI0cGVyc29uZW8uZXBhcmduZS1yZXRyYWl0ZS1lbnRyZXBy
aXNlcy5ibnBwYXJpYmFzLmNvbYIOcG9ydGFpbC1hZXAuZnKCH3BvcnRhbGRpZ2l0
YWwuYm5wcGFyaWJhcy5jb20uYnKCIXByaXZhdGUuc3RhZ2luZy5ibnBwYXJpYmFz
LWFtLmNvbYI7cHJvZmVzc2lvbmFsYmFua2luZy13ZWFsdGhtYW5hZ2VtZW50LXN0
YWdpbmcuYm5wcGFyaWJhcy5jb22CKHJhcHBvcnQtc3VzdGFpbmFiaWxpdHkuYm5w
cGFyaWJhcy1hbS5jb22CIHJlY2ViaXZlaXMtc3RnLmJucHBhcmliYXMuY29tLmJy
ghlyZWNlYml2ZWlzLmJucHBhcmliYXMuY29tgidzZ3Jib2xldG9pc3N1YW5jZS1z
dGcuYm5wcGFyaWJhcy5jb20uYnKCPXNzb3Rlc3RzLWRpcmVjdGVvLmVwYXJnbmUt
cmV0cmFpdGUtZW50cmVwcmlzZXMuYm5wcGFyaWJhcy5jb22CHnN0YWdpbmcuYndl
bGNvbWUuaHIuYm5wcGFyaWJhc4Irc3RhZ2luZy53b3Jrc3BhY2UucmVhbGVzdGF0
ZS5ibnBwYXJpYmFzLmNvbYIVc3RnZ2VzLmJucHBhcmliYXMuY29tgidzdXN0YWlu
YWJpbGl0eS1yZXBvcnQuYm5wcGFyaWJhcy1hbS5jb22CFnN5Z21hYm5wcGFyaWJh
cy1wZi5jb22CJXRoYWlsYW5kc29jaWFsc2VjdXJpdHkuYm5wcGFyaWJhcy5jb22C
LXRoYWlsYW5kc29jaWFsc2VjdXJpdHkuc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIk
dXMtaXNzdWluZy5wYXlpbmcucmVjLmJucHBhcmliYXMuY29tgiF1c2lzc3Vpbmdh
bmRwYXlpbmcuYm5wcGFyaWJhcy5jb22CEnZyYS5ibnBwYXJpYmFzLmNvbYIjd2Vh
bHRobWFuYWdlbWVudC1zdGFnaW5nLmJucHBhcmliYXOCJ3dlYWx0aG1hbmFnZW1l
bnQtc3RhZ2luZy5ibnBwYXJpYmFzLmNvbYIed3d3LmFudGlsbGVzLWd1eWFuZS5i
bnBwYXJpYmFzgid3d3cuYXNzaW5hdHVyYWRpZ2l0YWwuYm5wcGFyaWJhcy5jb20u
YnKCEnd3dy5iaWNpYm91cnNlLmNvbYIRd3d3LmJucHBhcmliYXMubmOCEXd3dy5i
bnBwYXJpYmFzLnJlgiZ3d3cuY2VudHJhbC5hbnRpbGxlcy1ndXlhbmUuYm5wcGFy
aWJhc4ISd3d3LmNyZWRpdGNsaWNrLmZyghp3d3cuY3RzLWxyYS5ibnBwYXJpYmFz
LmNvbYIed3d3LmRldi5id2VsY29tZS5oci5ibnBwYXJpYmFzgiN3d3cuaHIuZ3Jv
dXAuYXBpLnN0YWdpbmcuYm5wcGFyaWJhc4Ied3d3LmlyYi1jZW50cmFsLmJucHBh
cmliYXMuY29tghd3d3cubWVkaWFuYS5pZml0YWxpYS5pdIIWd3d3Lm9mcGYtYXNz
aXN0YW5jZS5mcoISd3d3LnBvcnRhaWwtYWVwLmZygiN3d3cucG9ydGFsZGlnaXRh
bC5ibnBwYXJpYmFzLmNvbS5icoIsd3d3LnJhcHBvcnQtc3VzdGFpbmFiaWxpdHku
Ym5wcGFyaWJhcy1hbS5jb22CInd3dy5zdGFnaW5nLmJ3ZWxjb21lLmhyLmJucHBh
cmliYXOCK3d3dy5zdXN0YWluYWJpbGl0eS1yZXBvcnQuYm5wcGFyaWJhcy1hbS5j
b20wPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIDiDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwgY8GA1UdHwSBhzCBhDBAoD6gPIY6aHR0cDovL2Ny
bDMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS00LmNy
bDBAoD6gPIY6aHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNB
U0hBMjU2MjAyMENBMS00LmNybDB/BggrBgEFBQcBAQRzMHEwJAYIKwYBBQUHMAGG
GGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBJBggrBgEFBQcwAoY9aHR0cDovL2Nh
Y2VydHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS0x
LmNydDAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIEAgSCAWwEggFoAWYAdQDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYv170zGAAAEAwBGMEQC
IES61kMwhgaX0ftHy6ilkMVOoJgYuwU4UhZ7DUrtfoK2AiBRVwU+wIS1VVkoQqOP
Me3lwXnXLkOZ2OFtuZcmxCoNoQB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABi/XvTKoAAAQDAEYwRAIgYuZoWA8D54epkWTrjGXlNZJV/7Q+xsuA
29jVaDiOeQ0CICgAwzcenkO1RFki2tN6eULi6tXV6wfyuSfJv4yQ8y+iAHYA2ra/
az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGL9e9MjQAABAMARzBFAiA1
GS4a/SGjIsvrXcTyPSeKj8nbuY2eTnkMQD5TFjr/GgIhAIdTpVnPMo9SneMywsgS
yMiNSGK6J4WE/FsoUoWhTbHsMA0GCSqGSIb3DQEBCwUAA4IBAQC5JOm+Ffp16EXW
muqbNtre0t9yxWFDVLCvxjvfaAglEOlXNUdhKKlvLcOM2I2JDiihTHWfcG4qDbhH
rrc9xcVgYOipkbVOKsJoM61EGTJNOMQVCZzI0Nag0Y2UDEPJ0VosOIEd1QOZWMGF
2KFOUm2HiyH5zL8Bu0Z1muzWAmITbRqwwxSM8lgVfUG7tntZ8j51DtM9TclddAiw
Bsexuf4HFZSZfRr8gHf5geWQN5CiNcPdbqDKU/LVsG0Vk66H+NxfjbfXbSywsRq0
GzkwzFj/+lQ2ZBJuUipCFvLtEhNb+bpaJJSlOMUNu8JWVS8SSrCo9q5LVCLKJpZP
pb2lPast
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEWt3w3CjIp+nwbt6ceXzRW+j5xmq8
xblOg2S6lHR+VK6odCvRQKHHfx7qEr9o4CjqWgK+QwPrYJGr0A7scGYlRA==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16590368550389216872679066665403222066
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00045addf0dc28c8a7e9f06ede9c797cd15be8f9c66abcc5b94e8364ba94747e54aea8742bd140a1c77f1eea12bf68e028ea5a02be4303eb6091abd00eec70662544
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							839fd6154979f80dd04cd3ef230413e94b173017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2766 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-prd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.dev.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2ctest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppam-private.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boleto.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.preprod.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compliance.staging.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect-internet.sso-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-cn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-in.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fmop-apac.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb-dr.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hr.group.api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Link2Portal.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfpx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofpf-assistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'professionalbanking-wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgrboletoissuance-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workspace.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuing.paying.rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usissuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wealthmanagement-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dev.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hr.group.api.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ofpf-assistance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portail-aep.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.bwelcome.hr.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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