cdc-securities-link.portail-investisseur.com

- BNP PARIBAS SA -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 49:bc:9d:cb:bf:5e:26:90:21:65:be:3e:2b:81:d2:e1 was issued on by Symantec Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Organization unit: IS - BNPP Securities Services
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 49:bc:9d:cb:bf:5e:26:90:21:65:be:3e:2b:81:d2:e1
Serial Number (int): 98012995982553628035643457597908046561
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): c1:94:17:c9:ba:67:13:59:8a:b1:25:99:31:61:ca:72:1f:ee:19:55
Fingerprint (sha256): 4d:9e:35:3a:a0:a6:92:39:e9:08:8a:73:36:d5:24:75:fc:17:cb:bd:89:57:fa:a0:ad:d7:15:b8:ca:75:e1:0e

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate cdc-securities-link.portail-investisseur.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdc-securities-link.portail-investisseur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cdc-securities-link.portail-investisseur.com
org-securities-link.bnpparibas.com
pblink.bnpparibas.com
securities-link.bnpparibas.com
commodityfutures-link.bnpparibas.com

Other certificates including the domain name portail-investisseur.com

(limited to 100 certificates)
cdc-rec.portail-investisseur.com
cdc-securities-link.portail-investisseur.com
cdc-securities-help-link.portail-investisseur.com
cdc-securities-help-link.portail-investisseur.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
pblink-ppd.bnpparibas.com
ssowhite.is.bnpparibas.com
bnp10s.bnpparibas.com
cdc-rec.portail-investisseur.com
securitiesrec-neolink.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-archive.portail-investisseur.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
geode-bp2s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
neolink-ppd.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-archive.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnpsspremiumnonprod.bnpparibas.com
bnp10b.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-securities-help-link.portail-investisseur.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10b.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities-link.portail-investisseur.com
myreportsrec-client.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
helprec.bp2s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-securities-link.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
dnarec.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
securitiesrec-client.bp2s.bnpparibas.com
cdc.portail-investisseur.com

Certificate

The complete raw certificate details for cdc-securities-link.portail-investisseur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Wd7Y5NlCAK4EF/UWOhA
aODXNcqLvyyqxqoEg8U51KXMWdyVmMw60KeU8gNAt9FDGG3jjzyHHLoBcM4CMxlj
gS8FqZPaYSGr2CGsH79F1da/oJNCLxHF8hjzer3xYnuvoFTE29Q901CM4EzVXSn8
BXqRNugR3abC9MLo0tZwcsI14XAf5pOxQj6DDVZRudiZw7TVqcWgRBA+QlX/Ewfe
jD5L2F58VXY4nsdOdkmBZT5egay7jbq/K5csZJa2Hci0YXuq025VZzTdKxxHT/BB
q2N2WOS4zxoG+/sw10zJ+5riFPjheDk5A3BqJ5JG2d+4yt5UDnCfyXUl6kmZuy6z
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98012995982553628035643457597908046561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IS - BNPP Securities Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cdc-securities-link.portail-investisseur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29464553927323186322953801658337598284458301177125569438625579321458824419038063219123019626557446664591346043811500651072814032039337840750976180550814190092751095673350627437655601691455855773362949384440345131492566305069606771844997161258824714692712973196815104414264315803505488869667796002862025736803075319777785398332038028776582249505424794973487847824646147057195768341649374112175462221558172202555356338289804505253005623382778254812967282607027298342651912802618742693360421907897773834736602358803740110657857363371172125840537287025731800473904226065756379166271116989009041093672797132831099148219323
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-securities-link.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org-securities-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pblink.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securities-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000153a96eab77000004030046304402207f16796a0e26f3a06d2018b2438f98ea894431bacad613fcbcb3e372643f358f0220513e9f353047200d9b3b4ce95a445621df6f1ce39b4e2f4e1bf4a7e1574bee60007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000153a96eaba20000040300463044022049a17d338556e2319df7f4ec3f82def024bbe030b8047836ed0732db1ea7522d022047ddc21b07958021a9f2ec09890b2abcfc9effc61c500ca323a02c664884c4b7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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