bnp09s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 06:d6:e2:65:9c:c4:e2:54:27:13:d8:1c:ef:bc:54:88 was issued on by DigiCert Inc.

With 93 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:d6:e2:65:9c:c4:e2:54:27:13:d8:1c:ef:bc:54:88
Serial Number (int): 9091111377568467368084038184423150728
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 47:ae:29:5f:ce:5c:31:8c:d6:2f:fb:c5:0b:92:ee:a9:90:80:45:ec
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 6f:2f:19:9e:3a:17:4f:21:88:33:89:30:0a:8f:fd:cb:cf:39:f4:6e
Fingerprint (sha256): 31:83:92:d8:79:29:81:94:21:f4:4a:11:f3:79:28:88:dc:e4:03:3a:95:ea:eb:7d:80:68:fa:1a:f2:b8:4a:d0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp09s.bnpparibas.com

93

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp09s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp09s.bnpparibas.com
acm.bgl.lu
alis.v16.staging.bnpparibas
analyticscom.bnpparibas
area-personale.staging.bnpparibascardif.it
asesoresbancaseguros.cardif.com.co
asesoresdaviplata.cardif.com.co
asesorestuya.cardif.com.co
auto.bnpparibascardif.cl
bnppcardif-indicadores.com.mx
cardifonline.com.mx
cetelem.fr
cflow-staging.bnpparibas-am.it
claims.cardif.com.co
claimsbancolombia.cardif.com.co
claimsbogota.cardif.com.co
clientmanager.bnpparibasfortisfactor.com
clientmgr-dk.bnpparibasfactoring.com
clubleonisa.cardif.com.co
cmonbusiness.bnpparibas-pf.com
comitescardif.com.mx
credit-cetelem.fr
dealernet.bnpparibasfortisfactor.com
definicionmedica.cardif.com.co
easyaccess.life.cardif.com.tw
easyaccess.nonlife.cardif.com.tw
eportfolio-ewm.bgl.lu
esign.bgl.lu
esignatures.bnpparibasfortisfactor.com
formation-buraliste-web-es.nickel.eu
fxclearer.bnpparibas.com
hdplusindex.bnpparibas.com
hdplusindex.com
incentivosbrilla.cardif.com.co
incentivosfinandina.cardif.com.co
incentivosla14.cardif.com.co
incentivossufi.cardif.com.co
inquiro-trade-preprod.bnpparibas.com
link2portal-tst.bnpparibas.com
mesadeayuda.cardif.com.co
misegurocardif.com.mx
miseguroleonisa.cardif.com.co
mobileservices1.bgl.lu
mybusinessbanking.bgl.lu
myleasingsolutions.bgl.lu
mywealth.bnpparibas.lu
oneproctool.bnpparibas.com
onetrust.cardif.com.tw
partenaire.domofinance.com
prescripteur.souscription-vat.neuges.org
prescripteur.souscription.neuges.org
proctechtool.bnpparibas.com
recette.prescripteur.souscription.neuges.org
repatriaciongrupobancoppel.com.mx
sadad.bnpparibas.com
seguroganas.cardif.com.co
segurosagrario.cardif.com.co
segurosclaro.cardif.com.co
segurosfinandina.cardif.com.co
segurosla14.cardif.com.co
segurosleonisa.cardif.com.co
segurosnequi.cardif.com.co
segurossufi.cardif.com.co
services.cetelem.fr
sig.cardif.com.co
simulationcg-prod-assurance.cardif.fr
sit1-olb.consorsfinanz.de
staging.mycardif.it
sub-uat.primebroker.com
sub.primebroker.com
vivetusegurooccidente.cardif.com.co
webbanking.bgl.lu
webcomponents.cardif.com.co
webdoc-algerie.bnpparibas.net
ws-ext-webappsvi.nickel.eu
ws-ext-zendesk.nickel.eu
ws.demo.staging.icare-service.com
www.area-personale.staging.bnpparibascardif.it
www.bnpparibasfactoring.com
www.bnppcardif-indicadores.com.mx
www.cardifonline.com.mx
www.cetelem.fr
www.cflow-staging.bnpparibas-am.it
www.comitescardif.com.mx
www.credit-cetelem.fr
www.hdplusindex.bnpparibas.com
www.hdplusindex.com
www.misegurocardif.com.mx
www.repatriaciongrupobancoppel.com.mx
www.simulationcg-prod-assurance.cardif.fr
www.speedata.com
www.staging.mycardif.it
www.webdoc-algerie.bnpparibas.net

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp09s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPzDCCDrSgAwIBAgIQBtbiZZzE4lQnE9gc77xUiDANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzExMjEwMDAwMDBa
Fw0yNDA1MjMyMzU5NTlaMHMxCzAJBgNVBAYTAkZSMRcwFQYDVQQIDA7DjmxlLWRl
LUZyYW5jZTESMBAGA1UEBxMJTU9OVFJFVUlMMRcwFQYDVQQKEw5CTlAgUEFSSUJB
UyBTQTEeMBwGA1UEAxMVYm5wMDlzLmJucHBhcmliYXMuY29tMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6soXnr/hChJwq8+PppOv8EzGBfcIjiFwvuRZ
FDT559/AtRR8jiKM/nYCzJX7LVdyJ4tJNeqOoL4VxDJwKRJ+QgLuTdz/853b9H+w
q/DGFnUWQzKF5wR2wOt/HPYWREHKYMEfooHW/huVgUI0nTEKkcH3ouWvmdQkykxf
4NpS383LPrhaQo26U3qZR16RDpufC9lXH6KdnTK7hWiGScL483Mmu0c2aKXcManU
sf5fDBe9AihH00Yl3Oa8pZFrMLufPmUKUk3irbr7fdIONygpeR7rV14ipXkjs7Mb
CAIj1CmAAdjD5DpIrklTXUjjzUQ6WO+o3Qy/aFnKfv/0i5N4sQIDAQABo4IMfjCC
DHowHwYDVR0jBBgwFoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFEeu
KV/OXDGM1i/7xQuS7qmQgEXsMIIKkQYDVR0RBIIKiDCCCoSCFWJucDA5cy5ibnBw
YXJpYmFzLmNvbYIKYWNtLmJnbC5sdYIbYWxpcy52MTYuc3RhZ2luZy5ibnBwYXJp
YmFzghdhbmFseXRpY3Njb20uYm5wcGFyaWJhc4IqYXJlYS1wZXJzb25hbGUuc3Rh
Z2luZy5ibnBwYXJpYmFzY2FyZGlmLml0giJhc2Vzb3Jlc2JhbmNhc2VndXJvcy5j
YXJkaWYuY29tLmNvgh9hc2Vzb3Jlc2RhdmlwbGF0YS5jYXJkaWYuY29tLmNvghph
c2Vzb3Jlc3R1eWEuY2FyZGlmLmNvbS5jb4IYYXV0by5ibnBwYXJpYmFzY2FyZGlm
LmNsgh1ibnBwY2FyZGlmLWluZGljYWRvcmVzLmNvbS5teIITY2FyZGlmb25saW5l
LmNvbS5teIIKY2V0ZWxlbS5mcoIeY2Zsb3ctc3RhZ2luZy5ibnBwYXJpYmFzLWFt
Lml0ghRjbGFpbXMuY2FyZGlmLmNvbS5jb4IfY2xhaW1zYmFuY29sb21iaWEuY2Fy
ZGlmLmNvbS5jb4IaY2xhaW1zYm9nb3RhLmNhcmRpZi5jb20uY2+CKGNsaWVudG1h
bmFnZXIuYm5wcGFyaWJhc2ZvcnRpc2ZhY3Rvci5jb22CJGNsaWVudG1nci1kay5i
bnBwYXJpYmFzZmFjdG9yaW5nLmNvbYIZY2x1Ymxlb25pc2EuY2FyZGlmLmNvbS5j
b4IeY21vbmJ1c2luZXNzLmJucHBhcmliYXMtcGYuY29tghRjb21pdGVzY2FyZGlm
LmNvbS5teIIRY3JlZGl0LWNldGVsZW0uZnKCJGRlYWxlcm5ldC5ibnBwYXJpYmFz
Zm9ydGlzZmFjdG9yLmNvbYIeZGVmaW5pY2lvbm1lZGljYS5jYXJkaWYuY29tLmNv
gh1lYXN5YWNjZXNzLmxpZmUuY2FyZGlmLmNvbS50d4IgZWFzeWFjY2Vzcy5ub25s
aWZlLmNhcmRpZi5jb20udHeCFWVwb3J0Zm9saW8tZXdtLmJnbC5sdYIMZXNpZ24u
YmdsLmx1giZlc2lnbmF0dXJlcy5ibnBwYXJpYmFzZm9ydGlzZmFjdG9yLmNvbYIk
Zm9ybWF0aW9uLWJ1cmFsaXN0ZS13ZWItZXMubmlja2VsLmV1ghhmeGNsZWFyZXIu
Ym5wcGFyaWJhcy5jb22CGmhkcGx1c2luZGV4LmJucHBhcmliYXMuY29tgg9oZHBs
dXNpbmRleC5jb22CHmluY2VudGl2b3NicmlsbGEuY2FyZGlmLmNvbS5jb4IhaW5j
ZW50aXZvc2ZpbmFuZGluYS5jYXJkaWYuY29tLmNvghxpbmNlbnRpdm9zbGExNC5j
YXJkaWYuY29tLmNvghxpbmNlbnRpdm9zc3VmaS5jYXJkaWYuY29tLmNvgiRpbnF1
aXJvLXRyYWRlLXByZXByb2QuYm5wcGFyaWJhcy5jb22CHmxpbmsycG9ydGFsLXRz
dC5ibnBwYXJpYmFzLmNvbYIZbWVzYWRlYXl1ZGEuY2FyZGlmLmNvbS5jb4IVbWlz
ZWd1cm9jYXJkaWYuY29tLm14gh1taXNlZ3Vyb2xlb25pc2EuY2FyZGlmLmNvbS5j
b4IWbW9iaWxlc2VydmljZXMxLmJnbC5sdYIYbXlidXNpbmVzc2JhbmtpbmcuYmds
Lmx1ghlteWxlYXNpbmdzb2x1dGlvbnMuYmdsLmx1ghZteXdlYWx0aC5ibnBwYXJp
YmFzLmx1ghpvbmVwcm9jdG9vbC5ibnBwYXJpYmFzLmNvbYIWb25ldHJ1c3QuY2Fy
ZGlmLmNvbS50d4IacGFydGVuYWlyZS5kb21vZmluYW5jZS5jb22CKHByZXNjcmlw
dGV1ci5zb3VzY3JpcHRpb24tdmF0Lm5ldWdlcy5vcmeCJHByZXNjcmlwdGV1ci5z
b3VzY3JpcHRpb24ubmV1Z2VzLm9yZ4IbcHJvY3RlY2h0b29sLmJucHBhcmliYXMu
Y29tgixyZWNldHRlLnByZXNjcmlwdGV1ci5zb3VzY3JpcHRpb24ubmV1Z2VzLm9y
Z4IhcmVwYXRyaWFjaW9uZ3J1cG9iYW5jb3BwZWwuY29tLm14ghRzYWRhZC5ibnBw
YXJpYmFzLmNvbYIZc2VndXJvZ2FuYXMuY2FyZGlmLmNvbS5jb4Icc2VndXJvc2Fn
cmFyaW8uY2FyZGlmLmNvbS5jb4Iac2VndXJvc2NsYXJvLmNhcmRpZi5jb20uY2+C
HnNlZ3Vyb3NmaW5hbmRpbmEuY2FyZGlmLmNvbS5jb4IZc2VndXJvc2xhMTQuY2Fy
ZGlmLmNvbS5jb4Icc2VndXJvc2xlb25pc2EuY2FyZGlmLmNvbS5jb4Iac2VndXJv
c25lcXVpLmNhcmRpZi5jb20uY2+CGXNlZ3Vyb3NzdWZpLmNhcmRpZi5jb20uY2+C
E3NlcnZpY2VzLmNldGVsZW0uZnKCEXNpZy5jYXJkaWYuY29tLmNvgiVzaW11bGF0
aW9uY2ctcHJvZC1hc3N1cmFuY2UuY2FyZGlmLmZyghlzaXQxLW9sYi5jb25zb3Jz
ZmluYW56LmRlghNzdGFnaW5nLm15Y2FyZGlmLml0ghdzdWItdWF0LnByaW1lYnJv
a2VyLmNvbYITc3ViLnByaW1lYnJva2VyLmNvbYIjdml2ZXR1c2VndXJvb2NjaWRl
bnRlLmNhcmRpZi5jb20uY2+CEXdlYmJhbmtpbmcuYmdsLmx1ght3ZWJjb21wb25l
bnRzLmNhcmRpZi5jb20uY2+CHXdlYmRvYy1hbGdlcmllLmJucHBhcmliYXMubmV0
ghp3cy1leHQtd2ViYXBwc3ZpLm5pY2tlbC5ldYIYd3MtZXh0LXplbmRlc2submlj
a2VsLmV1giF3cy5kZW1vLnN0YWdpbmcuaWNhcmUtc2VydmljZS5jb22CLnd3dy5h
cmVhLXBlcnNvbmFsZS5zdGFnaW5nLmJucHBhcmliYXNjYXJkaWYuaXSCG3d3dy5i
bnBwYXJpYmFzZmFjdG9yaW5nLmNvbYIhd3d3LmJucHBjYXJkaWYtaW5kaWNhZG9y
ZXMuY29tLm14ghd3d3cuY2FyZGlmb25saW5lLmNvbS5teIIOd3d3LmNldGVsZW0u
ZnKCInd3dy5jZmxvdy1zdGFnaW5nLmJucHBhcmliYXMtYW0uaXSCGHd3dy5jb21p
dGVzY2FyZGlmLmNvbS5teIIVd3d3LmNyZWRpdC1jZXRlbGVtLmZygh53d3cuaGRw
bHVzaW5kZXguYm5wcGFyaWJhcy5jb22CE3d3dy5oZHBsdXNpbmRleC5jb22CGXd3
dy5taXNlZ3Vyb2NhcmRpZi5jb20ubXiCJXd3dy5yZXBhdHJpYWNpb25ncnVwb2Jh
bmNvcHBlbC5jb20ubXiCKXd3dy5zaW11bGF0aW9uY2ctcHJvZC1hc3N1cmFuY2Uu
Y2FyZGlmLmZyghB3d3cuc3BlZWRhdGEuY29tghd3d3cuc3RhZ2luZy5teWNhcmRp
Zi5pdIIhd3d3LndlYmRvYy1hbGdlcmllLmJucHBhcmliYXMubmV0MD4GA1UdIAQ3
MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0
LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0
dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBD
QTEtNC5jcmwwfwYIKwYBBQUHAQEEczBxMCQGCCsGAQUFBzABhhhodHRwOi8vb2Nz
cC5kaWdpY2VydC5jb20wSQYIKwYBBQUHMAKGPWh0dHA6Ly9jYWNlcnRzLmRpZ2lj
ZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtMS5jcnQwDAYDVR0T
AQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEA
UmuugEadnk0ZSna6vPPcTK46gRMYMcbPI8dwLtFN3rQ3H3hTllN2P8QLdLiP+BwZ
BkFpZYvxKnJNhhGRxN9C8+2Vaz0I0FexERCblunsA1kI1kV55KVO2+Cypq5WQ6Es
PSEm5p1xycpS1GV9Fg71O9a+WLMyrStl7PGuOs/WH3lo/kXLo3b22GZWcxC58gzP
uzJUR904aEkagzQxbJFzP9LjaNODm2Dv+fAeC/qZOlh4P4mG+rR0PrE68TWVJu5g
h57zMmaVT1oAyMiBzOlOxzgUlZn7hlG9yusCApvy9V5kRkBJbr2ymTRZMWvRxreJ
hEh0stgGt91S2qVVWJl/VQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6soXnr/hChJwq8+PppOv
8EzGBfcIjiFwvuRZFDT559/AtRR8jiKM/nYCzJX7LVdyJ4tJNeqOoL4VxDJwKRJ+
QgLuTdz/853b9H+wq/DGFnUWQzKF5wR2wOt/HPYWREHKYMEfooHW/huVgUI0nTEK
kcH3ouWvmdQkykxf4NpS383LPrhaQo26U3qZR16RDpufC9lXH6KdnTK7hWiGScL4
83Mmu0c2aKXcManUsf5fDBe9AihH00Yl3Oa8pZFrMLufPmUKUk3irbr7fdIONygp
eR7rV14ipXkjs7MbCAIj1CmAAdjD5DpIrklTXUjjzUQ6WO+o3Qy/aFnKfv/0i5N4
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9091111377568467368084038184423150728
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp09s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29639418772667591773287968131419786967674207175387698063772480998150026582010699843545430847765937407457751594359952176304561949966918142314205492527367086478093289477939042489376901649281166490058705769678439182665274914100839807017958780583664218962953327945904152403360467727852920202552964054322044071455583834654299563919060476076023563188418857397959450442606246200482340697220237166984901598558494945459842631697452222496308836637748658584711150956168383624475973847004300118067647253413837186628012627938563568189086176088374373435826190239891213231060696011396592559544494790347161009330081230892091539945649
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47ae295fce5c318cd62ffbc50b92eea9908045ec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2696 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp09s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'analyticscom.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresbancaseguros.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesoresdaviplata.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asesorestuya.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.bnpparibascardif.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claims.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbancolombia.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'claimsbogota.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmanager.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clientmgr-dk.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clubleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cmonbusiness.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dealernet.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'definicionmedica.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.life.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easyaccess.nonlife.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportfolio-ewm.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esign.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esignatures.bnpparibasfortisfactor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'formation-buraliste-web-es.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxclearer.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosbrilla.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'incentivossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inquiro-trade-preprod.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'link2portal-tst.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mesadeayuda.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miseguroleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices1.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mybusinessbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myleasingsolutions.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mywealth.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneproctool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onetrust.cardif.com.tw'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaire.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription-vat.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'proctechtool.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.prescripteur.souscription.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sadad.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seguroganas.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosagrario.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosclaro.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosfinandina.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosla14.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosleonisa.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurosnequi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'segurossufi.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sig.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit1-olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.mycardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sub.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivetusegurooccidente.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webbanking.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcomponents.cardif.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webappsvi.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-zendesk.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.demo.staging.icare-service.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.area-personale.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibasfactoring.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnppcardif-indicadores.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardifonline.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cflow-staging.bnpparibas-am.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comitescardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.credit-cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hdplusindex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.misegurocardif.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.repatriaciongrupobancoppel.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.simulationcg-prod-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.speedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.mycardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-algerie.bnpparibas.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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