bnp02b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert ECC Secure Server CA

About this certificate

This digital certificate with serial number 0f:cb:9f:b7:82:db:03:d2:85:b4:ba:1b:19:8e:d0:03 was issued on by DigiCert Inc.

With 89 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:cb:9f:b7:82:db:03:d2:85:b4:ba:1b:19:8e:d0:03
Serial Number (int): 20995695641434852909940680830365913091
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 09:a8:f9:4c:03:cf:d1:71:30:ce:be:eb:50:70:9f:3f:8a:84:c3:4f
AuthorityKeyId: a3:9d:e6:1f:f9:da:39:4f:c0:6e:e8:91:cb:95:a5:da:31:e2:0a:9f

Fingerprint (sha1): 2b:e8:e5:e8:0d:62:1c:bd:e4:a6:72:7f:a1:5f:d3:b0:ad:8e:2a:41
Fingerprint (sha256): 39:a7:9a:54:6d:0a:3d:35:b3:9c:58:ec:d0:9a:2c:bd:26:cc:9f:2c:d7:50:49:7e:bf:12:46:99:c6:2e:fa:78

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-ecc-g1.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-ecc-g1.crl

Check the revocation status for certificate bnp02b.bnpparibas.com

89

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp02b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp02b.bnpparibas.com
staging.lfd2.bnpparibas-pf.com
test-securities-query.bnpparibas.com
openupprogram.com
international-buyers.bnpparibas.fr
staging.easyconfo.fr
staging.easyikea.fr
easy.bnpparibas.it
www.i-assurial.fr
www.easy.bnpparibas.com
international-buyers.bnpparibas.com
correspondant-epargne.fr
collect-bnl.bnpparibas.fr
staging.international-buyers.bnpparibas.fr
bnpparibascardif.co.uk
lfd2.bnpparibas-pf.com
erelio.epargne-retraite-entreprises.bnpparibas.com
correspondant-assurance-fr.staging.bnpparibas-ip.com
bnpplink-staging.bnpparibas.co.in
www.fundquestadvisor.com
contract.one2fin.factor.bnpparibas
www.bnpparibas-ip.at
staging.international-buyers.bnpparibas.com
easy.bnpparibas.de
www.betet.bnpparibas.hu
bnpplink-uat2.bnpparibas.co.in
homologation.easyconfo.fr
corporatecard.bnl.bnpparibas.com
www.bnpparibascardif.co.uk
www.easyconfo.fr
www.correspondant-assurance.fr
easy.bnpparibas.co.uk
homologation.lfd2.bnpparibas-pf.com
easy.bnpparibas-ip.fr
homologation.international-buyers.bnpparibas.fr
funds-api.staging.bnpparibas.com
noasis.bnpparibas.com
collect-emib.staging.bnpparibas.fr
clients.fundquestadvisor.com
www.easy.bnpparibas.fr
easy.bnpparibas.ch
www.bnpparibas-am.at
fundquestadvisor.com
preprod.finagora.nl
homologation.international-buyers.bnpparibas.nl
collect.dcrm.bnpparibas.fr
www.boite-outils-business.fr
bnpparibas-ip.at
www.easy.bnpparibas.lu
clients-fundquestadvisor-com.staging.bnpparibas-ip.com
homologation.boite-outils-business.fr
www.easy.bnpparibas.ch
funds-api.bnpparibas.com
www.i-assurial.com
www.correspondant-epargne.fr
profile.one2fin.factor.bnpparibas
betet.bnpparibas.hu
institutionnels.bnpparibas-am.fr
www.institutionnels.bnpparibas-am.fr
easy.bnpparibas.fr
core.one2fin.factor.bnpparibas
collect-pprod.dcrm.bnpparibas.fr
www.easy.bnpparibas.it
www.easy.bnpparibas-ip.fr
easy.bnpparibas.com
www.easyikea.fr
easy.bnpparibas.lu
international-buyers.bnpparibas.nl
docfinder.bnpparibas-am.com
correspondant-assurance.fr
bop.one2fin.factor.bnpparibas
docfinder.is.bnpparibas-ip.com
organization.one2fin.factor.bnpparibas
www.easy.bnpparibas-am.fr
collect-bnppf.bnpparibas.fr
correspondant-epargne-fr.staging.bnpparibas-ip.com
www.easy.bnpparibas.co.uk
www.institutionnels-ip.bnpparibas.fr
ofr.one2fin.factor.bnpparibas
homologation.international-buyers.bnpparibas.com
www.easy.bnpparibas.de
staging.boite-outils-business.fr
institutionnels-ip.bnpparibas.fr
homologation.easyikea.fr
www.clients.fundquestadvisor.com
report.one2fin.factor.bnpparibas
easy.bnpparibas-am.fr
bnpparibas-am.at
staging.international-buyers.bnpparibas.nl

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp02b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPHTCCDqSgAwIBAgIQD8uft4LbA9KFtLobGY7QAzAKBggqhkjOPQQDAjBMMQsw
CQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSYwJAYDVQQDEx1EaWdp
Q2VydCBFQ0MgU2VjdXJlIFNlcnZlciBDQTAeFw0xODA5MDcwMDAwMDBaFw0xOTA5
MDcxMjAwMDBaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUgRnJhbmNl
MRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMR4w
HAYDVQQDExVibnAwMmIuYm5wcGFyaWJhcy5jb20wWTATBgcqhkjOPQIBBggqhkjO
PQMBBwNCAASNtt+1GTCf6oFlcvdLED6zj1wexFIKKUbeV5lBei6SaVwRgD4zNk0i
goowslpE0JPX87mItW0xkP3Eb+x6XxDYo4INQDCCDTwwHwYDVR0jBBgwFoAUo53m
H/naOU/AbuiRy5Wl2jHiCp8wHQYDVR0OBBYEFAmo+UwDz9FxMM6+61Bwnz+KhMNP
MIIKgAYDVR0RBIIKdzCCCnOCFWJucDAyYi5ibnBwYXJpYmFzLmNvbYIec3RhZ2lu
Zy5sZmQyLmJucHBhcmliYXMtcGYuY29tgiR0ZXN0LXNlY3VyaXRpZXMtcXVlcnku
Ym5wcGFyaWJhcy5jb22CEW9wZW51cHByb2dyYW0uY29tgiJpbnRlcm5hdGlvbmFs
LWJ1eWVycy5ibnBwYXJpYmFzLmZyghRzdGFnaW5nLmVhc3ljb25mby5mcoITc3Rh
Z2luZy5lYXN5aWtlYS5mcoISZWFzeS5ibnBwYXJpYmFzLml0ghF3d3cuaS1hc3N1
cmlhbC5mcoIXd3d3LmVhc3kuYm5wcGFyaWJhcy5jb22CI2ludGVybmF0aW9uYWwt
YnV5ZXJzLmJucHBhcmliYXMuY29tghhjb3JyZXNwb25kYW50LWVwYXJnbmUuZnKC
GWNvbGxlY3QtYm5sLmJucHBhcmliYXMuZnKCKnN0YWdpbmcuaW50ZXJuYXRpb25h
bC1idXllcnMuYm5wcGFyaWJhcy5mcoIWYm5wcGFyaWJhc2NhcmRpZi5jby51a4IW
bGZkMi5ibnBwYXJpYmFzLXBmLmNvbYIyZXJlbGlvLmVwYXJnbmUtcmV0cmFpdGUt
ZW50cmVwcmlzZXMuYm5wcGFyaWJhcy5jb22CNGNvcnJlc3BvbmRhbnQtYXNzdXJh
bmNlLWZyLnN0YWdpbmcuYm5wcGFyaWJhcy1pcC5jb22CIWJucHBsaW5rLXN0YWdp
bmcuYm5wcGFyaWJhcy5jby5pboIYd3d3LmZ1bmRxdWVzdGFkdmlzb3IuY29tgiJj
b250cmFjdC5vbmUyZmluLmZhY3Rvci5ibnBwYXJpYmFzghR3d3cuYm5wcGFyaWJh
cy1pcC5hdIIrc3RhZ2luZy5pbnRlcm5hdGlvbmFsLWJ1eWVycy5ibnBwYXJpYmFz
LmNvbYISZWFzeS5ibnBwYXJpYmFzLmRlghd3d3cuYmV0ZXQuYm5wcGFyaWJhcy5o
dYIeYm5wcGxpbmstdWF0Mi5ibnBwYXJpYmFzLmNvLmlughlob21vbG9nYXRpb24u
ZWFzeWNvbmZvLmZygiBjb3Jwb3JhdGVjYXJkLmJubC5ibnBwYXJpYmFzLmNvbYIa
d3d3LmJucHBhcmliYXNjYXJkaWYuY28udWuCEHd3dy5lYXN5Y29uZm8uZnKCHnd3
dy5jb3JyZXNwb25kYW50LWFzc3VyYW5jZS5mcoIVZWFzeS5ibnBwYXJpYmFzLmNv
LnVrgiNob21vbG9nYXRpb24ubGZkMi5ibnBwYXJpYmFzLXBmLmNvbYIVZWFzeS5i
bnBwYXJpYmFzLWlwLmZygi9ob21vbG9nYXRpb24uaW50ZXJuYXRpb25hbC1idXll
cnMuYm5wcGFyaWJhcy5mcoIgZnVuZHMtYXBpLnN0YWdpbmcuYm5wcGFyaWJhcy5j
b22CFW5vYXNpcy5ibnBwYXJpYmFzLmNvbYIiY29sbGVjdC1lbWliLnN0YWdpbmcu
Ym5wcGFyaWJhcy5mcoIcY2xpZW50cy5mdW5kcXVlc3RhZHZpc29yLmNvbYIWd3d3
LmVhc3kuYm5wcGFyaWJhcy5mcoISZWFzeS5ibnBwYXJpYmFzLmNoghR3d3cuYm5w
cGFyaWJhcy1hbS5hdIIUZnVuZHF1ZXN0YWR2aXNvci5jb22CE3ByZXByb2QuZmlu
YWdvcmEubmyCL2hvbW9sb2dhdGlvbi5pbnRlcm5hdGlvbmFsLWJ1eWVycy5ibnBw
YXJpYmFzLm5sghpjb2xsZWN0LmRjcm0uYm5wcGFyaWJhcy5mcoIcd3d3LmJvaXRl
LW91dGlscy1idXNpbmVzcy5mcoIQYm5wcGFyaWJhcy1pcC5hdIIWd3d3LmVhc3ku
Ym5wcGFyaWJhcy5sdYI2Y2xpZW50cy1mdW5kcXVlc3RhZHZpc29yLWNvbS5zdGFn
aW5nLmJucHBhcmliYXMtaXAuY29tgiVob21vbG9nYXRpb24uYm9pdGUtb3V0aWxz
LWJ1c2luZXNzLmZyghZ3d3cuZWFzeS5ibnBwYXJpYmFzLmNoghhmdW5kcy1hcGku
Ym5wcGFyaWJhcy5jb22CEnd3dy5pLWFzc3VyaWFsLmNvbYIcd3d3LmNvcnJlc3Bv
bmRhbnQtZXBhcmduZS5mcoIhcHJvZmlsZS5vbmUyZmluLmZhY3Rvci5ibnBwYXJp
YmFzghNiZXRldC5ibnBwYXJpYmFzLmh1giBpbnN0aXR1dGlvbm5lbHMuYm5wcGFy
aWJhcy1hbS5mcoIkd3d3Lmluc3RpdHV0aW9ubmVscy5ibnBwYXJpYmFzLWFtLmZy
ghJlYXN5LmJucHBhcmliYXMuZnKCHmNvcmUub25lMmZpbi5mYWN0b3IuYm5wcGFy
aWJhc4IgY29sbGVjdC1wcHJvZC5kY3JtLmJucHBhcmliYXMuZnKCFnd3dy5lYXN5
LmJucHBhcmliYXMuaXSCGXd3dy5lYXN5LmJucHBhcmliYXMtaXAuZnKCE2Vhc3ku
Ym5wcGFyaWJhcy5jb22CD3d3dy5lYXN5aWtlYS5mcoISZWFzeS5ibnBwYXJpYmFz
Lmx1giJpbnRlcm5hdGlvbmFsLWJ1eWVycy5ibnBwYXJpYmFzLm5sghtkb2NmaW5k
ZXIuYm5wcGFyaWJhcy1hbS5jb22CGmNvcnJlc3BvbmRhbnQtYXNzdXJhbmNlLmZy
gh1ib3Aub25lMmZpbi5mYWN0b3IuYm5wcGFyaWJhc4IeZG9jZmluZGVyLmlzLmJu
cHBhcmliYXMtaXAuY29tgiZvcmdhbml6YXRpb24ub25lMmZpbi5mYWN0b3IuYm5w
cGFyaWJhc4IZd3d3LmVhc3kuYm5wcGFyaWJhcy1hbS5mcoIbY29sbGVjdC1ibnBw
Zi5ibnBwYXJpYmFzLmZygjJjb3JyZXNwb25kYW50LWVwYXJnbmUtZnIuc3RhZ2lu
Zy5ibnBwYXJpYmFzLWlwLmNvbYIZd3d3LmVhc3kuYm5wcGFyaWJhcy5jby51a4Ik
d3d3Lmluc3RpdHV0aW9ubmVscy1pcC5ibnBwYXJpYmFzLmZygh1vZnIub25lMmZp
bi5mYWN0b3IuYm5wcGFyaWJhc4IwaG9tb2xvZ2F0aW9uLmludGVybmF0aW9uYWwt
YnV5ZXJzLmJucHBhcmliYXMuY29tghZ3d3cuZWFzeS5ibnBwYXJpYmFzLmRlgiBz
dGFnaW5nLmJvaXRlLW91dGlscy1idXNpbmVzcy5mcoIgaW5zdGl0dXRpb25uZWxz
LWlwLmJucHBhcmliYXMuZnKCGGhvbW9sb2dhdGlvbi5lYXN5aWtlYS5mcoIgd3d3
LmNsaWVudHMuZnVuZHF1ZXN0YWR2aXNvci5jb22CIHJlcG9ydC5vbmUyZmluLmZh
Y3Rvci5ibnBwYXJpYmFzghVlYXN5LmJucHBhcmliYXMtYW0uZnKCEGJucHBhcmli
YXMtYW0uYXSCKnN0YWdpbmcuaW50ZXJuYXRpb25hbC1idXllcnMuYm5wcGFyaWJh
cy5ubDAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMGkGA1UdHwRiMGAwLqAsoCqGKGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z
c2NhLWVjYy1nMS5jcmwwLqAsoCqGKGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9z
c2NhLWVjYy1nMS5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQEwKjAoBggrBgEF
BQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgIwewYI
KwYBBQUHAQEEbzBtMCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdpY2VydC5j
b20wRQYIKwYBBQUHMAKGOWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydEVDQ1NlY3VyZVNlcnZlckNBLmNydDAJBgNVHRMEAjAAMIIBBAYKKwYBBAHW
eQIEAgSB9QSB8gDwAHcApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFltNGZmwAABAMASDBGAiEAvgFx41Rt2FAiP8QggMCe+t3KxkzyuJE2G+f1l300
IssCIQDx3YTz2W7r9+jq9sEyKXxTWUZnmPzdeZY/QTSZ0feqdgB1AId1v+dZfPiM
Q5lfvfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABZbTRmnUAAAQDAEYwRAIgLahWoaPE
Dj2tjtYa3K7MQQLL6XVGqSYoRS0jWxUvabICIHtWX6iGdZZSK2O3Ik3pF6mX/eT8
S3JXktewednPkMBoMAoGCCqGSM49BAMCA2cAMGQCMEmSTciEzkaI78IJ1tn9vTn8
yHwo980pjsefARy1BSBh8VAgOa+Ti6X1XgP5PJwM3AIwW7HqO/tiRN7inAi279an
vlq4kz/2CW1iO58fMnPFbpVEmM9dFVzsE3VOxQeej5qM
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEjbbftRkwn+qBZXL3SxA+s49cHsRS
CilG3leZQXoukmlcEYA+MzZNIoKKMLJaRNCT1/O5iLVtMZD9xG/sel8Q2A==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20995695641434852909940680830365913091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert ECC Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp02b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00048db6dfb519309fea816572f74b103eb38f5c1ec4520a2946de5799417a2e92695c11803e33364d22828a30b25a44d093d7f3b988b56d3190fdc46fec7a5f10d8
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a39de61ff9da394fc06ee891cb95a5da31e20a9f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09a8f94c03cfd17130cebeeb50709f3f8a84c34f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2679 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp02b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-securities-query.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openupprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-assurial.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnl.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'erelio.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-assurance-fr.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpplink-staging.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'contract.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-ip.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpplink-uat2.bnpparibas.co.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatecard.bnl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibascardif.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyconfo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.lfd2.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas-ip.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noasis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-emib.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.finagora.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-ip.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clients-fundquestadvisor-com.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'funds-api.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.i-assurial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.correspondant-epargne.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'profile.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'betet.bnpparibas.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionnels.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'core.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-pprod.dcrm.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas-ip.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-assurance.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bop.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docfinder.is.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'organization.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collect-bnppf.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'correspondant-epargne-fr.staging.bnpparibas-ip.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.institutionnels-ip.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ofr.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.international-buyers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.easy.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.boite-outils-business.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutionnels-ip.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologation.easyikea.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clients.fundquestadvisor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'report.one2fin.factor.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'easy.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.international-buyers.bnpparibas.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-ecc-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertECCSecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000165b4d1999b0000040300483046022100be0171e3546dd850223fc42080c09efaddcac64cf2b891361be7f5977d3422cb022100f1dd84f3d96eebf7e8eaf6c132297c5359466798fcdd79963f413499d1f7aa760075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000165b4d19a75000004030046304402202da856a1a3c40e3dad8ed61adcaecc4102cbe97546a92628452d235b152f69b202207b565fa8867596522b63b7224de917a997fde4fc4b725792d7b079d9cf90c068
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (816 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 11323690134351350559235249703036260879839002584878879327346829322398268485072405049942405935224089867449724475018460
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 14113149160873861394818251711488732102893710787113025298737614141126013406280317773224747785658925375773422866373260