f17aaabc20bfe045075927934fed52d21.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS Hybrid ECC SHA384 2020 CA1

About this certificate

This digital certificate with serial number 03:32:3e:34:cd:de:40:fe:86:72:5c:25:95:85:e1:51 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:3e:34:cd:de:40:fe:86:72:5c:25:95:85:e1:51
Serial Number (int): 4248560523254481617395777800971346257
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c3:29:c6:24:d9:cc:c6:19:72:e9:bd:7c:92:e3:97:4f:b3:67:f9:79
AuthorityKeyId: 0a:bc:08:29:17:8c:a5:39:6d:7a:0e:ce:33:c7:2e:b3:ed:fb:c3:7a

Fingerprint (sha1): 5b:ea:53:a2:f6:30:a2:b7:20:b8:e0:15:cd:34:46:22:81:9a:2c:93
Fingerprint (sha256): 30:00:d5:03:9c:76:58:62:50:ed:ee:21:99:66:5d:f0:bb:f4:d9:bf:a3:2a:9d:5b:6f:0f:d6:b2:7b:96:81:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl

Check the revocation status for certificate f17aaabc20bfe045075927934fed52d21.bnpparibas.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA384

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

f17aaabc20bfe045075927934fed52d21.bnpparibas.com
arbitrage.bnpparibas.com
arval.cn
arvaljiutong.cn
cib.bnpparibas
cib.bnpparibas.com
connexistradebg.uat1.bnpparibas.com
contrib.cib.bnpparibas
cortexfx-pp.bnpparibas.com
cortexsecondary-pp.bnpparibas.com
custexfactory.bnpparibascardif.com
depuis100ans.lu
e2c.bnpparibasfortis.be
easy2cash.bnpparibasfortis.be
ebroker-rechm.staging.sygmabnpparibas-pf.com
ebroker-recrf.staging.sygmabnpparibas-pf.com
economic-research.bnpparibas.com
editodistribution-assurance.cardif.fr
edraft.uat1.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
ereporting.asia.bnpparibas.com
eware.uat1.bnpparibas.com
factor.bnpparibas.de
factor.bnpparibas.dk
factor.bnpparibas.nl
factor.bnpparibas.pt
factor.bnpparibas.se
factor.bnpparibasfortis.be
factoring.bnpparibas.com
fastaccess-c02-rec.cardif.fr
fundquestadvisor-com.staging.bnpparibas-ip.com
ifitalia.it
immersion360.realestate.bnpparibas
indemnisation-c01.staging.cardif.fr
india-netpay.bnpparibas.com
limmobilierdunmondequichange.fr
navesylogistica.es
netpaycentric-india.bnpparibas.com
oficinas.bnpparibas.es
optimisermon.epargne-retraite-entreprises.bnpparibas.com
pewee.bnpparibas.com
www.reim.bnpparibas.de
www.scpi.immo
wwwcoll.hellobank.it
preprod.cofinoga.fr
preprod.espace-client.cdgp.fr
preprod.espace-client.cofinoga.fr
property-management.realestate.bnpparibas
psyg-rechm.staging.sygmabnpparibas-pf.com
psyg-recrf.staging.sygmabnpparibas-pf.com
qabnpparibasfortis.com
ratama-dz.bnpparibas.dz
ratama-pp-pos.bnpparibas.dz
reim.bnpparibas.de
research.bnpparibas.com
scpi.immo
secondary-smartderivatives-pp.bnpparibas.com
stream01-cortexfx-pp.bnpparibas.com
stream02-cortexfx-pp.bnpparibas.com
tabletnickel-service.staging.abm-uid.com
webprive.epargne-entreprise.staging.bnpparibas.com
www.arval.cn
www.arvaljiutong.cn
www.cofinoga.fr
www.custexfactory.bnpparibascardif.com
www.e2c.bnpparibasfortis.be
www.easy2cash.bnpparibasfortis.be
www.economic-research.bnpparibas.com
www.espace-client.cdgp.fr
www.factor.bnpparibas.de
www.factor.bnpparibas.dk
www.factor.bnpparibas.nl
www.factor.bnpparibas.se
www.factor.bnpparibasfortis.be
www.i-cliential.com
www.ifitalia.it
www.immersion360.realestate.bnpparibas
www.limmobilierdunmondequichange.fr
www.navesylogistica.es
www.oficinas.bnpparibas.es
www.property-management.realestate.bnpparibas
www.qabnpparibasfortis.com
www.ratama-dz.bnpparibas.dz
www.ratama-pp-pos.bnpparibas.dz

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com
oak-extranet.bnpparibas-am.com
otcetrader-globalmarkets.bnpparibas.com
bnp03s.bnpparibas.com
ssoforms.bnpparibas.com
bnp06s.bnpparibas.com
bnp23b.bnpparibas.com
bnp04s.bnpparibas.com
securities.bnpparibas.com

Certificate

The complete raw certificate details for f17aaabc20bfe045075927934fed52d21.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIN0TCCDVagAwIBAgIQAzI+NM3eQP6GclwllYXhUTAKBggqhkjOPQQDAzBWMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTAwLgYDVQQDEydEaWdp
Q2VydCBUTFMgSHlicmlkIEVDQyBTSEEzODQgMjAyMCBDQTEwHhcNMjIwNDE0MDAw
MDAwWhcNMjIwOTI3MjM1OTU5WjCBjTELMAkGA1UEBhMCRlIxFjAUBgNVBAgTDUls
ZSBkZSBGcmFuY2UxEjAQBgNVBAcTCU1PTlRSRVVJTDEXMBUGA1UEChMOQk5QIFBB
UklCQVMgU0ExOTA3BgNVBAMTMGYxN2FhYWJjMjBiZmUwNDUwNzU5Mjc5MzRmZWQ1
MmQyMS5ibnBwYXJpYmFzLmNvbTBZMBMGByqGSM49AgEGCCqGSM49AwEHA0IABOMO
S5RJMtvP6/TaGWyGnBS1eahxMjz0G2Qy8fAWjZxM5DWIk7NbP/WkO3R/hd1ucEZZ
xVFxp1ZpEC2OBb6BdHejggvMMIILyDAfBgNVHSMEGDAWgBQKvAgpF4ylOW16Ds4z
xy6z7fvDejAdBgNVHQ4EFgQUwynGJNnMxhly6b18kuOXT7Nn+XkwggnPBgNVHREE
ggnGMIIJwoIwZjE3YWFhYmMyMGJmZTA0NTA3NTkyNzkzNGZlZDUyZDIxLmJucHBh
cmliYXMuY29tghhhcmJpdHJhZ2UuYm5wcGFyaWJhcy5jb22CCGFydmFsLmNugg9h
cnZhbGppdXRvbmcuY26CDmNpYi5ibnBwYXJpYmFzghJjaWIuYm5wcGFyaWJhcy5j
b22CI2Nvbm5leGlzdHJhZGViZy51YXQxLmJucHBhcmliYXMuY29tghZjb250cmli
LmNpYi5ibnBwYXJpYmFzghpjb3J0ZXhmeC1wcC5ibnBwYXJpYmFzLmNvbYIhY29y
dGV4c2Vjb25kYXJ5LXBwLmJucHBhcmliYXMuY29tgiJjdXN0ZXhmYWN0b3J5LmJu
cHBhcmliYXNjYXJkaWYuY29tgg9kZXB1aXMxMDBhbnMubHWCF2UyYy5ibnBwYXJp
YmFzZm9ydGlzLmJlgh1lYXN5MmNhc2guYm5wcGFyaWJhc2ZvcnRpcy5iZYIsZWJy
b2tlci1yZWNobS5zdGFnaW5nLnN5Z21hYm5wcGFyaWJhcy1wZi5jb22CLGVicm9r
ZXItcmVjcmYuc3RhZ2luZy5zeWdtYWJucHBhcmliYXMtcGYuY29tgiBlY29ub21p
Yy1yZXNlYXJjaC5ibnBwYXJpYmFzLmNvbYIlZWRpdG9kaXN0cmlidXRpb24tYXNz
dXJhbmNlLmNhcmRpZi5mcoIaZWRyYWZ0LnVhdDEuYm5wcGFyaWJhcy5jb22CJGVy
ZWNlaXB0MmNlbnRyaWMuYXNpYS5ibnBwYXJpYmFzLmNvbYIeZXJlcG9ydGluZy5h
c2lhLmJucHBhcmliYXMuY29tghlld2FyZS51YXQxLmJucHBhcmliYXMuY29tghRm
YWN0b3IuYm5wcGFyaWJhcy5kZYIUZmFjdG9yLmJucHBhcmliYXMuZGuCFGZhY3Rv
ci5ibnBwYXJpYmFzLm5sghRmYWN0b3IuYm5wcGFyaWJhcy5wdIIUZmFjdG9yLmJu
cHBhcmliYXMuc2WCGmZhY3Rvci5ibnBwYXJpYmFzZm9ydGlzLmJlghhmYWN0b3Jp
bmcuYm5wcGFyaWJhcy5jb22CHGZhc3RhY2Nlc3MtYzAyLXJlYy5jYXJkaWYuZnKC
LmZ1bmRxdWVzdGFkdmlzb3ItY29tLnN0YWdpbmcuYm5wcGFyaWJhcy1pcC5jb22C
C2lmaXRhbGlhLml0giJpbW1lcnNpb24zNjAucmVhbGVzdGF0ZS5ibnBwYXJpYmFz
giNpbmRlbW5pc2F0aW9uLWMwMS5zdGFnaW5nLmNhcmRpZi5mcoIbaW5kaWEtbmV0
cGF5LmJucHBhcmliYXMuY29tgh9saW1tb2JpbGllcmR1bm1vbmRlcXVpY2hhbmdl
LmZyghJuYXZlc3lsb2dpc3RpY2EuZXOCIm5ldHBheWNlbnRyaWMtaW5kaWEuYm5w
cGFyaWJhcy5jb22CFm9maWNpbmFzLmJucHBhcmliYXMuZXOCOG9wdGltaXNlcm1v
bi5lcGFyZ25lLXJldHJhaXRlLWVudHJlcHJpc2VzLmJucHBhcmliYXMuY29tghRw
ZXdlZS5ibnBwYXJpYmFzLmNvbYIWd3d3LnJlaW0uYm5wcGFyaWJhcy5kZYINd3d3
LnNjcGkuaW1tb4IUd3d3Y29sbC5oZWxsb2JhbmsuaXSCE3ByZXByb2QuY29maW5v
Z2EuZnKCHXByZXByb2QuZXNwYWNlLWNsaWVudC5jZGdwLmZygiFwcmVwcm9kLmVz
cGFjZS1jbGllbnQuY29maW5vZ2EuZnKCKXByb3BlcnR5LW1hbmFnZW1lbnQucmVh
bGVzdGF0ZS5ibnBwYXJpYmFzgilwc3lnLXJlY2htLnN0YWdpbmcuc3lnbWFibnBw
YXJpYmFzLXBmLmNvbYIpcHN5Zy1yZWNyZi5zdGFnaW5nLnN5Z21hYm5wcGFyaWJh
cy1wZi5jb22CFnFhYm5wcGFyaWJhc2ZvcnRpcy5jb22CF3JhdGFtYS1kei5ibnBw
YXJpYmFzLmR6ghtyYXRhbWEtcHAtcG9zLmJucHBhcmliYXMuZHqCEnJlaW0uYm5w
cGFyaWJhcy5kZYIXcmVzZWFyY2guYm5wcGFyaWJhcy5jb22CCXNjcGkuaW1tb4Is
c2Vjb25kYXJ5LXNtYXJ0ZGVyaXZhdGl2ZXMtcHAuYm5wcGFyaWJhcy5jb22CI3N0
cmVhbTAxLWNvcnRleGZ4LXBwLmJucHBhcmliYXMuY29tgiNzdHJlYW0wMi1jb3J0
ZXhmeC1wcC5ibnBwYXJpYmFzLmNvbYIodGFibGV0bmlja2VsLXNlcnZpY2Uuc3Rh
Z2luZy5hYm0tdWlkLmNvbYIyd2VicHJpdmUuZXBhcmduZS1lbnRyZXByaXNlLnN0
YWdpbmcuYm5wcGFyaWJhcy5jb22CDHd3dy5hcnZhbC5jboITd3d3LmFydmFsaml1
dG9uZy5jboIPd3d3LmNvZmlub2dhLmZygiZ3d3cuY3VzdGV4ZmFjdG9yeS5ibnBw
YXJpYmFzY2FyZGlmLmNvbYIbd3d3LmUyYy5ibnBwYXJpYmFzZm9ydGlzLmJlgiF3
d3cuZWFzeTJjYXNoLmJucHBhcmliYXNmb3J0aXMuYmWCJHd3dy5lY29ub21pYy1y
ZXNlYXJjaC5ibnBwYXJpYmFzLmNvbYIZd3d3LmVzcGFjZS1jbGllbnQuY2RncC5m
coIYd3d3LmZhY3Rvci5ibnBwYXJpYmFzLmRlghh3d3cuZmFjdG9yLmJucHBhcmli
YXMuZGuCGHd3dy5mYWN0b3IuYm5wcGFyaWJhcy5ubIIYd3d3LmZhY3Rvci5ibnBw
YXJpYmFzLnNlgh53d3cuZmFjdG9yLmJucHBhcmliYXNmb3J0aXMuYmWCE3d3dy5p
LWNsaWVudGlhbC5jb22CD3d3dy5pZml0YWxpYS5pdIImd3d3LmltbWVyc2lvbjM2
MC5yZWFsZXN0YXRlLmJucHBhcmliYXOCI3d3dy5saW1tb2JpbGllcmR1bm1vbmRl
cXVpY2hhbmdlLmZyghZ3d3cubmF2ZXN5bG9naXN0aWNhLmVzghp3d3cub2ZpY2lu
YXMuYm5wcGFyaWJhcy5lc4Itd3d3LnByb3BlcnR5LW1hbmFnZW1lbnQucmVhbGVz
dGF0ZS5ibnBwYXJpYmFzghp3d3cucWFibnBwYXJpYmFzZm9ydGlzLmNvbYIbd3d3
LnJhdGFtYS1kei5ibnBwYXJpYmFzLmR6gh93d3cucmF0YW1hLXBwLXBvcy5ibnBw
YXJpYmFzLmR6MA4GA1UdDwEB/wQEAwIHgDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwgZsGA1UdHwSBkzCBkDBGoESgQoZAaHR0cDovL2NybDMuZGlnaWNl
cnQuY29tL0RpZ2lDZXJ0VExTSHlicmlkRUNDU0hBMzg0MjAyMENBMS0xLmNybDBG
oESgQoZAaHR0cDovL2NybDQuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTSHlicmlk
RUNDU0hBMzg0MjAyMENBMS0xLmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjApMCcG
CCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwgYUGCCsGAQUF
BwEBBHkwdzAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tME8G
CCsGAQUFBzAChkNodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRU
TFNIeWJyaWRFQ0NTSEEzODQyMDIwQ0ExLTEuY3J0MAkGA1UdEwQCMAAwEwYKKwYB
BAHWeQIEAwEB/wQCBQAwCgYIKoZIzj0EAwMDaQAwZgIxAPAtbRJnfDgvc9R3btDU
bOXVPG8QOINPWXA+XONGeAuS8i5SaP4Pwd0Cc/9vpSZGfAIxAImVBZnTdfxwNMr5
V4xYZq7Q0kv5d1RaMiw/BB45osLIwiVeqER2L6UthfgXufAnig==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAE4w5LlEky28/r9NoZbIacFLV5qHEy
PPQbZDLx8BaNnEzkNYiTs1s/9aQ7dH+F3W5wRlnFUXGnVmkQLY4FvoF0dw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4248560523254481617395777800971346257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS Hybrid ECC SHA384 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-09-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004e30e4b944932dbcfebf4da196c869c14b579a871323cf41b6432f1f0168d9c4ce4358893b35b3ff5a43b747f85dd6e704659c55171a75669102d8e05be817477
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0abc0829178ca5396d7a0ece33c72eb3edfbc37a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c329c624d9ccc61972e9bd7c92e3974fb367f979
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2502 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'f17aaabc20bfe045075927934fed52d21.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arbitrage.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cib.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexistradebg.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contrib.cib.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cortexsecondary-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'depuis100ans.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'editodistribution-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edraft.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eware.uat1.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factoring.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fastaccess-c02-rec.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indemnisation-c01.staging.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'india-netpay.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netpaycentric-india.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'optimisermon.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pewee.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wwwcoll.hellobank.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.espace-client.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-rechm.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psyg-recrf.staging.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reim.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scpi.immo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secondary-smartderivatives-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream01-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stream02-cortexfx-pp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webprive.epargne-entreprise.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arval.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arvaljiutong.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.custexfactory.bnpparibascardif.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e2c.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy2cash.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.economic-research.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espace-client.cdgp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibas.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.factor.bnpparibasfortis.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-cliential.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.immersion360.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.limmobilierdunmondequichange.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.navesylogistica.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.oficinas.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.property-management.realestate.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qabnpparibasfortis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-dz.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ratama-pp-pos.bnpparibas.dz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSHybridECCSHA3842020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.3 (ecdsaWithSHA384)
 . . . . [c:0|t:3|false] BIT STRING (832 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 36966692179655289599132762929694645773941424210848522795670696730089858793643298934047202613796501594040747082270332
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21175825840728519385166865327585671974024809844745164317005817685259778197860529610668049713577932702317925859600266