bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:8b:e4:bf:0e:76:a0:63:c6:85:08:b6:b4:7f:b0:61 was issued on by DigiCert Inc.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:8b:e4:bf:0e:76:a0:63:c6:85:08:b6:b4:7f:b0:61
Serial Number (int): 12689420751845457505228271889932071009
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c3:da:0e:29:57:22:3a:75:5b:20:0e:1d:f5:41:e3:85:4f:08:77:dc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3e:1b:55:3c:a2:c9:01:49:8c:44:9f:af:a4:2c:fa:9e:1b:36:e6:3f
Fingerprint (sha256): 39:e3:37:e8:ab:15:5b:0f:28:41:3a:35:48:61:f3:ba:c1:cb:e2:11:13:86:12:0c:4f:ea:9e:f6:93:22:e8:b0

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g7.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g7.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.primebroker.com
authentication.staging.bnpparibas.com
authservices.smsps.bnl.it
auto.cetelem.es
backoffice.cercle-actionnaires.bnpparibas
basic07-eu.formation.akatest.pilax.com
basic07.formation.akatest.pilax.com
bds-pb.bnpparibas.com
bicisnet.net
bnp07s.bnpparibas.com
bnpparibas-pb.primebroker.com
bnpparibas.com.ar
bnpparibas.primebroker.com
bo-preprod.wearetennis.bnpparibas
bo.wearetennis.bnpparibas
cdc-rec.portail-investisseur.com
cdc.portail-investisseur.com
cdn-bo-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cercle-actionnaires.bnpparibas
cercle-actionnaires.bnpparibas.com
cetelem.es
commodityfutures-rec.bnpparibas.com
commodityfutures.bnpparibas.com
connexisach.americas.bnpparibas.com
cvw.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
fundwebuat.bnpparibas.com
gctabsreporting.bnpparibas.com
geode-bp2s.bnpparibas.com
geode.portail-investisseur.com
god-rec.bnpparibas.com
hsp-ppd.bnpparibas.com
ib.bnpparibas.com.br
ibpssobr.us-cib-gtm.bnpparibas.com
isa.bnpparibas.com
mobileics.primebroker.com
pianopensione.bnl.it
portalbr.us-cib-gtm.bnpparibas.com
postventaauto.cetelem.es
preprod.wearetennis.bnpparibas
primebroker.com
reportdownloader.primebroker.com
reunion.bnpparibas.net
securitiescorp.bnpparibas.com
securitiesservices.bnpparibas.com.br
serviciosweb.cetelem.es
sso.allfunds-bc.com
ssologin-bp2s.bnpparibas.com
ssologinrec.bnpparibas.com
ssorec.allfunds-bc.com
staging.primebroker.com
std07-eu.formation.akatest.pilax.com
std07.formation.akatest.pilax.com
stgapi.primebroker.com
stgbnpparibas-pb.primebroker.com
stgbnpparibas.primebroker.com
stgmonitor.primebroker.com
stgreportdownloader.primebroker.com
temporaire-reunion.bnpparibas.net
temporaire-www.bicisnet.net
temporaire-www.ubcinet.net
ubcinet.net
us-issuingandpaying.bnpparibas.com
webdoc-senegal.bicisnet.net
welfarecoll.bnl.it
wellmakers.bnl.it
wellmakers.bnpparibas.it
wellmakerscoll.bnl.it
wellmakerscoll.bnpparibas.it
www.auto.cetelem.es
www.bicisnet.net
www.bnpparibas.com.ar
www.bnpparibas.com.br
www.cercle-actionnaires.bnpparibas
www.cercle-actionnaires.bnpparibas.com
www.cetelem.es
www.cifact.com
www.cifact2.com
www.cvw.bnpparibas.com
www.france-titrisation.com
www.france-titrisation.fr
www.pianopensione.bnl.it
www.primebroker.com
www.reunion.bnpparibas.net
www.serviciosweb.cetelem.es
www.temporaire-www.bicisnet.net
www.temporaire-www.ubcinet.net
www.ubcinet.net
www.webdoc-senegal.bicisnet.net
www.welfarecoll.bnl.it
www.wellmakers.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakerscoll.bnpparibas.it
www.zonacliente.cetelem.es
zonacliente.cetelem.es

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQrDCCD5SgAwIBAgIQCYvkvw52oGPGhQi2tH+wYTANBgkqhkiG9w0BAQsFADBN
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E
aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMjEwNzIyMDAwMDAwWhcN
MjExMTIzMjM1OTU5WjBaMQswCQYDVQQGEwJGUjESMBAGA1UEBxMJTU9OVFJFVUlM
MRcwFQYDVQQKEw5CTlAgUEFSSUJBUyBTQTEeMBwGA1UEAxMVYm5wMDdzLmJucHBh
cmliYXMuY29tMFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEY0SNjggOFIiCWn0A
nOAEh8odm4I7zyvU1piyBhor0wUglQyLkrxgI3JA0npYrPHKfrCOa0aLFm8JKrJW
Vq1iyqOCDkQwgg5AMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0G
A1UdDgQWBBTD2g4pVyI6dVsgDh31QeOFTwh33DCCCxIGA1UdEQSCCwkwggsFghNh
cGkucHJpbWVicm9rZXIuY29tgiVhdXRoZW50aWNhdGlvbi5zdGFnaW5nLmJucHBh
cmliYXMuY29tghlhdXRoc2VydmljZXMuc21zcHMuYm5sLml0gg9hdXRvLmNldGVs
ZW0uZXOCKWJhY2tvZmZpY2UuY2VyY2xlLWFjdGlvbm5haXJlcy5ibnBwYXJpYmFz
giZiYXNpYzA3LWV1LmZvcm1hdGlvbi5ha2F0ZXN0LnBpbGF4LmNvbYIjYmFzaWMw
Ny5mb3JtYXRpb24uYWthdGVzdC5waWxheC5jb22CFWJkcy1wYi5ibnBwYXJpYmFz
LmNvbYIMYmljaXNuZXQubmV0ghVibnAwN3MuYm5wcGFyaWJhcy5jb22CHWJucHBh
cmliYXMtcGIucHJpbWVicm9rZXIuY29tghFibnBwYXJpYmFzLmNvbS5hcoIaYm5w
cGFyaWJhcy5wcmltZWJyb2tlci5jb22CIWJvLXByZXByb2Qud2VhcmV0ZW5uaXMu
Ym5wcGFyaWJhc4IZYm8ud2VhcmV0ZW5uaXMuYm5wcGFyaWJhc4IgY2RjLXJlYy5w
b3J0YWlsLWludmVzdGlzc2V1ci5jb22CHGNkYy5wb3J0YWlsLWludmVzdGlzc2V1
ci5jb22CJWNkbi1iby1wcmVwcm9kLndlYXJldGVubmlzLmJucHBhcmliYXOCHWNk
bi1iby53ZWFyZXRlbm5pcy5ibnBwYXJpYmFzgiJjZG4tcHJlcHJvZC53ZWFyZXRl
bm5pcy5ibnBwYXJpYmFzgi1jZG4uYmFja29mZmljZS5jZXJjbGUtYWN0aW9ubmFp
cmVzLmJucHBhcmliYXOCImNkbi5jZXJjbGUtYWN0aW9ubmFpcmVzLmJucHBhcmli
YXOCHmNlcmNsZS1hY3Rpb25uYWlyZXMuYm5wcGFyaWJhc4IiY2VyY2xlLWFjdGlv
bm5haXJlcy5ibnBwYXJpYmFzLmNvbYIKY2V0ZWxlbS5lc4IjY29tbW9kaXR5ZnV0
dXJlcy1yZWMuYm5wcGFyaWJhcy5jb22CH2NvbW1vZGl0eWZ1dHVyZXMuYm5wcGFy
aWJhcy5jb22CI2Nvbm5leGlzYWNoLmFtZXJpY2FzLmJucHBhcmliYXMuY29tghJj
dncuYm5wcGFyaWJhcy5jb22CJmVudHJlcHJpc2VzLWVyZS5zdGFnaW5nLmJucHBh
cmliYXMuY29tghlmdW5kd2VidWF0LmJucHBhcmliYXMuY29tgh5nY3RhYnNyZXBv
cnRpbmcuYm5wcGFyaWJhcy5jb22CGWdlb2RlLWJwMnMuYm5wcGFyaWJhcy5jb22C
Hmdlb2RlLnBvcnRhaWwtaW52ZXN0aXNzZXVyLmNvbYIWZ29kLXJlYy5ibnBwYXJp
YmFzLmNvbYIWaHNwLXBwZC5ibnBwYXJpYmFzLmNvbYIUaWIuYm5wcGFyaWJhcy5j
b20uYnKCImlicHNzb2JyLnVzLWNpYi1ndG0uYm5wcGFyaWJhcy5jb22CEmlzYS5i
bnBwYXJpYmFzLmNvbYIZbW9iaWxlaWNzLnByaW1lYnJva2VyLmNvbYIUcGlhbm9w
ZW5zaW9uZS5ibmwuaXSCInBvcnRhbGJyLnVzLWNpYi1ndG0uYm5wcGFyaWJhcy5j
b22CGHBvc3R2ZW50YWF1dG8uY2V0ZWxlbS5lc4IecHJlcHJvZC53ZWFyZXRlbm5p
cy5ibnBwYXJpYmFzgg9wcmltZWJyb2tlci5jb22CIHJlcG9ydGRvd25sb2FkZXIu
cHJpbWVicm9rZXIuY29tghZyZXVuaW9uLmJucHBhcmliYXMubmV0gh1zZWN1cml0
aWVzY29ycC5ibnBwYXJpYmFzLmNvbYIkc2VjdXJpdGllc3NlcnZpY2VzLmJucHBh
cmliYXMuY29tLmJyghdzZXJ2aWNpb3N3ZWIuY2V0ZWxlbS5lc4ITc3NvLmFsbGZ1
bmRzLWJjLmNvbYIcc3NvbG9naW4tYnAycy5ibnBwYXJpYmFzLmNvbYIac3NvbG9n
aW5yZWMuYm5wcGFyaWJhcy5jb22CFnNzb3JlYy5hbGxmdW5kcy1iYy5jb22CF3N0
YWdpbmcucHJpbWVicm9rZXIuY29tgiRzdGQwNy1ldS5mb3JtYXRpb24uYWthdGVz
dC5waWxheC5jb22CIXN0ZDA3LmZvcm1hdGlvbi5ha2F0ZXN0LnBpbGF4LmNvbYIW
c3RnYXBpLnByaW1lYnJva2VyLmNvbYIgc3RnYm5wcGFyaWJhcy1wYi5wcmltZWJy
b2tlci5jb22CHXN0Z2JucHBhcmliYXMucHJpbWVicm9rZXIuY29tghpzdGdtb25p
dG9yLnByaW1lYnJva2VyLmNvbYIjc3RncmVwb3J0ZG93bmxvYWRlci5wcmltZWJy
b2tlci5jb22CIXRlbXBvcmFpcmUtcmV1bmlvbi5ibnBwYXJpYmFzLm5ldIIbdGVt
cG9yYWlyZS13d3cuYmljaXNuZXQubmV0ghp0ZW1wb3JhaXJlLXd3dy51YmNpbmV0
Lm5ldIILdWJjaW5ldC5uZXSCInVzLWlzc3VpbmdhbmRwYXlpbmcuYm5wcGFyaWJh
cy5jb22CG3dlYmRvYy1zZW5lZ2FsLmJpY2lzbmV0Lm5ldIISd2VsZmFyZWNvbGwu
Ym5sLml0ghF3ZWxsbWFrZXJzLmJubC5pdIIYd2VsbG1ha2Vycy5ibnBwYXJpYmFz
Lml0ghV3ZWxsbWFrZXJzY29sbC5ibmwuaXSCHHdlbGxtYWtlcnNjb2xsLmJucHBh
cmliYXMuaXSCE3d3dy5hdXRvLmNldGVsZW0uZXOCEHd3dy5iaWNpc25ldC5uZXSC
FXd3dy5ibnBwYXJpYmFzLmNvbS5hcoIVd3d3LmJucHBhcmliYXMuY29tLmJygiJ3
d3cuY2VyY2xlLWFjdGlvbm5haXJlcy5ibnBwYXJpYmFzgiZ3d3cuY2VyY2xlLWFj
dGlvbm5haXJlcy5ibnBwYXJpYmFzLmNvbYIOd3d3LmNldGVsZW0uZXOCDnd3dy5j
aWZhY3QuY29tgg93d3cuY2lmYWN0Mi5jb22CFnd3dy5jdncuYm5wcGFyaWJhcy5j
b22CGnd3dy5mcmFuY2UtdGl0cmlzYXRpb24uY29tghl3d3cuZnJhbmNlLXRpdHJp
c2F0aW9uLmZyghh3d3cucGlhbm9wZW5zaW9uZS5ibmwuaXSCE3d3dy5wcmltZWJy
b2tlci5jb22CGnd3dy5yZXVuaW9uLmJucHBhcmliYXMubmV0ght3d3cuc2Vydmlj
aW9zd2ViLmNldGVsZW0uZXOCH3d3dy50ZW1wb3JhaXJlLXd3dy5iaWNpc25ldC5u
ZXSCHnd3dy50ZW1wb3JhaXJlLXd3dy51YmNpbmV0Lm5ldIIPd3d3LnViY2luZXQu
bmV0gh93d3cud2ViZG9jLXNlbmVnYWwuYmljaXNuZXQubmV0ghZ3d3cud2VsZmFy
ZWNvbGwuYm5sLml0ghV3d3cud2VsbG1ha2Vycy5ibmwuaXSCHHd3dy53ZWxsbWFr
ZXJzLmJucHBhcmliYXMuaXSCGXd3dy53ZWxsbWFrZXJzY29sbC5ibmwuaXSCIHd3
dy53ZWxsbWFrZXJzY29sbC5ibnBwYXJpYmFzLml0ghp3d3cuem9uYWNsaWVudGUu
Y2V0ZWxlbS5lc4IWem9uYWNsaWVudGUuY2V0ZWxlbS5lczAOBgNVHQ8BAf8EBAMC
B4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMGsGA1UdHwRkMGIwL6At
oCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzcuY3JsMC+g
LaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWc3LmNybDA+
BgNVHSAENzA1MDMGBmeBDAECAjApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRp
Z2ljZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRw
Oi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRz
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYD
VR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHYA9lyUL9F3MCIU
VBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF6znNbGwAABAMARzBFAiB5LgzSux2O
TWB4qmyXNLRhm4EvMfHdWsQ3HsgnfVUpwgIhAOCuq/ZBa26h8QXJ8Pzl/wZBltgJ
L/VstiDKaSTUCXIZAHYAXNxDkv7mq0VEsV6a1FbmEDf71fpH3KFzlLJe5vbHDsoA
AAF6znNbSwAABAMARzBFAiAoWdaKYrRh1IDgRVSiVbM72LXvpAQkgT/tk4/WFx/q
RgIhAJWZT0OfJgp89tdZSV96I1hgzVXxioJvsMbFQzfdTJ85AHYA7sCV7o1yZA+S
48O5G8cSo2lqCXtLahoUOOZHssvtxfkAAAF6znNbhAAABAMARzBFAiEAvxHrx4oo
F8+SIAN6BLRNHKK8X8foapR9S4bPJQGbLAoCIGcfKR4Uu85sNL7jw2kMV2AU8ON6
9JJDSus+G8024eaFMA0GCSqGSIb3DQEBCwUAA4IBAQC+VwD0d/0vkNkNEXy2h6LJ
RazNjHhD9Lx+56qechjqMcTdr6hLQYSStEWbIqhgps58+OvO4fDGUtzBoHItBUE0
cAqFhAZDHm9cwVOEzKQyM39ypNtbYem5At544KaNc5VqK2rzBB3Sz7irZiT0y7Bv
AGTlKJ05NvZe/abMETcwBj19KN5Ob8sSM13D1IegTGs+I3JCj3MquiD9L/Du87hw
iX7QMdO7I0nLJEseb3jvTlFSO8sYxvMI+LyxjbstwUXuOtHiCDqf8m2E/hjq7WTL
QEGJA6Z2qYR6OYFTpQSFH+R7iVuPhc53GvL1PAKhhunR7ZqtIlFlsyWJRjIOFMXK
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEY0SNjggOFIiCWn0AnOAEh8odm4I7
zyvU1piyBhor0wUglQyLkrxgI3JA0npYrPHKfrCOa0aLFm8JKrJWVq1iyg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12689420751845457505228271889932071009
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000463448d8e080e1488825a7d009ce00487ca1d9b823bcf2bd4d698b2061a2bd30520950c8b92bc60237240d27a58acf1ca7eb08e6b468b166f092ab25656ad62ca
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c3da0e2957223a755b200e1df541e3854f0877dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2825 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authservices.smsps.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bds-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibpssobr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileics.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalbr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiesservices.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pianopensione.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.temporaire-www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ubcinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-senegal.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g7.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017ace735b1b00000403004730450220792e0cd2bb1d8e4d6078aa6c9734b4619b812f31f1dd5ac4371ec8277d5529c2022100e0aeabf6416b6ea1f105c9f0fce5ff064196d8092ff56cb620ca6924d40972190076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017ace735b4b000004030047304502202859d68a62b461d480e04554a255b33bd8b5efa40424813fed938fd6171fea4602210095994f439f260a7cf6d759495f7a235860cd55f18a826fb0c6c54337dd4c9f39007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f90000017ace735b840000040300473045022100bf11ebc78a2817cf9220037a04b44d1ca2bc5fc7e86a947d4b86cf25019b2c0a0220671f291e14bbce6c34bee3c3690c576014f0e37af492434aeb3e1bcd36e1e685
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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