bnp07s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 04:17:3c:94:7b:6a:fb:64:7e:3d:8c:7e:2e:d1:76:26 was issued on by DigiCert Inc.

With 81 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:17:3c:94:7b:6a:fb:64:7e:3d:8c:7e:2e:d1:76:26
Serial Number (int): 5437563519426225251081613429783492134
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 9c:45:cf:ea:f9:c1:03:be:19:22:d6:df:a8:99:c8:31:07:3c:ea:04
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): ff:bd:ed:cf:27:5e:1b:58:33:f1:84:06:7b:0e:38:8e:df:3b:d9:9e
Fingerprint (sha256): 5a:c7:da:78:35:c0:db:4c:a8:37:31:bc:4a:d8:e0:05:64:da:e7:bd:fa:fd:e1:7d:29:a6:97:1c:0f:54:f5:5c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl

Check the revocation status for certificate bnp07s.bnpparibas.com

81

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp07s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

zonacliente.cetelem.es
www.zonacliente.cetelem.es
www.wellmakerscoll.bnpparibas.it
www.wellmakerscoll.bnl.it
www.wellmakers.bnpparibas.it
www.wellmakers.bnl.it
www.welfarecoll.bnl.it
www.serviciosweb.cetelem.es
www.reunion.bnpparibas.net
www.primebroker.com
www.france-titrisation.fr
www.france-titrisation.com
www.cifact2.com
www.cifact.com
www.cetelem.es
www.cercle-actionnaires.bnpparibas.com
www.cercle-actionnaires.bnpparibas
www.bnpparibas.com.br
www.bnpparibas.com.ar
www.auto.cetelem.es
wellmakerscoll.bnpparibas.it
wellmakerscoll.bnl.it
wellmakers.bnpparibas.it
wellmakers.bnl.it
welfarecoll.bnl.it
us-issuingandpaying.bnpparibas.com
temporaire-reunion.bnpparibas.net
stgreportdownloader.primebroker.com
stgmonitor.primebroker.com
stgbnpparibas.primebroker.com
stgbnpparibas-pb.primebroker.com
std07.formation.akatest.pilax.com
std07-eu.formation.akatest.pilax.com
staging.primebroker.com
ssorec.allfunds-bc.com
ssologinrec.bnpparibas.com
ssologin-bp2s.bnpparibas.com
sso.allfunds-bc.com
serviciosweb.cetelem.es
securitiescorp.bnpparibas.com
reunion.bnpparibas.net
primebroker.com
preprod.wearetennis.bnpparibas
postventaauto.cetelem.es
portalbr.us-cib-gtm.bnpparibas.com
mobileics.primebroker.com
isa.bnpparibas.com
ibpssobr.us-cib-gtm.bnpparibas.com
ib.bnpparibas.com.br
hsp-ppd.bnpparibas.com
god-rec.bnpparibas.com
geode.portail-investisseur.com
geode-bp2s.bnpparibas.com
gctabsreporting.bnpparibas.com
fundwebuat.bnpparibas.com
entreprises-ere.staging.bnpparibas.com
cvw.bnpparibas.com
connexisach.americas.bnpparibas.com
commodityfutures.bnpparibas.com
commodityfutures-rec.bnpparibas.com
cetelem.es
cercle-actionnaires.bnpparibas.com
cercle-actionnaires.bnpparibas
cdn.cercle-actionnaires.bnpparibas
cdn.backoffice.cercle-actionnaires.bnpparibas
cdn-preprod.wearetennis.bnpparibas
cdn-bo.wearetennis.bnpparibas
cdn-bo-preprod.wearetennis.bnpparibas
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
bo.wearetennis.bnpparibas
bo-preprod.wearetennis.bnpparibas
bnpparibas.com.ar
bnpparibas-pb.primebroker.com
bnp07s.bnpparibas.com
bds-pb.bnpparibas.com
basic07.formation.akatest.pilax.com
basic07-eu.formation.akatest.pilax.com
backoffice.cercle-actionnaires.bnpparibas
auto.cetelem.es
authentication.staging.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp07s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIOUjCCDTqgAwIBAgIQBBc8lHtq+2R+PYx+LtF2JjANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMDEyMDcwMDAwMDBa
Fw0yMTExMjIyMzU5NTlaMFoxCzAJBgNVBAYTAkZSMRIwEAYDVQQHEwlNT05UUkVV
SUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFTIFNBMR4wHAYDVQQDExVibnAwN3MuYm5w
cGFyaWJhcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmREXO
Sr267owhuLtMM9o6/VujKZhBMWkr1BsJ6sCvnmiU51jmnYYNm+iOMfsa3lqCbOWp
OYzp9mKzdBes3PGgzXzMEnukqlKE4vyzWwmhOlISe4sdHlvC3NmoYO/i0BcIcz/U
nrSij3/WPKqGwhvx6eZVhSPEZp+rgngo7m5SxWNEaoABqEYaVh5AiTNgizce6s7p
skf7h2c5Q30O76lGjIJEk8tvpLqqzRvVUPyMc9Z5o/FsdiZf+Ecoh28x6cs2fjJW
nk9KxnF5Ho9+iwrckp/vCb5w0BSrj+U9DKRL5BtxttX7h8qnMFgxKIZdCT7oZg3C
68ReOqM9UIJFLvSbAgMBAAGjggsdMIILGTAfBgNVHSMEGDAWgBS3a6LqqKqEjHnq
tNoPmLLFlXa59DAdBgNVHQ4EFgQUnEXP6vnBA74ZItbfqJnIMQc86gQwggkoBgNV
HREEggkfMIIJG4IWem9uYWNsaWVudGUuY2V0ZWxlbS5lc4Iad3d3LnpvbmFjbGll
bnRlLmNldGVsZW0uZXOCIHd3dy53ZWxsbWFrZXJzY29sbC5ibnBwYXJpYmFzLml0
ghl3d3cud2VsbG1ha2Vyc2NvbGwuYm5sLml0ghx3d3cud2VsbG1ha2Vycy5ibnBw
YXJpYmFzLml0ghV3d3cud2VsbG1ha2Vycy5ibmwuaXSCFnd3dy53ZWxmYXJlY29s
bC5ibmwuaXSCG3d3dy5zZXJ2aWNpb3N3ZWIuY2V0ZWxlbS5lc4Iad3d3LnJldW5p
b24uYm5wcGFyaWJhcy5uZXSCE3d3dy5wcmltZWJyb2tlci5jb22CGXd3dy5mcmFu
Y2UtdGl0cmlzYXRpb24uZnKCGnd3dy5mcmFuY2UtdGl0cmlzYXRpb24uY29tgg93
d3cuY2lmYWN0Mi5jb22CDnd3dy5jaWZhY3QuY29tgg53d3cuY2V0ZWxlbS5lc4Im
d3d3LmNlcmNsZS1hY3Rpb25uYWlyZXMuYm5wcGFyaWJhcy5jb22CInd3dy5jZXJj
bGUtYWN0aW9ubmFpcmVzLmJucHBhcmliYXOCFXd3dy5ibnBwYXJpYmFzLmNvbS5i
coIVd3d3LmJucHBhcmliYXMuY29tLmFyghN3d3cuYXV0by5jZXRlbGVtLmVzghx3
ZWxsbWFrZXJzY29sbC5ibnBwYXJpYmFzLml0ghV3ZWxsbWFrZXJzY29sbC5ibmwu
aXSCGHdlbGxtYWtlcnMuYm5wcGFyaWJhcy5pdIIRd2VsbG1ha2Vycy5ibmwuaXSC
EndlbGZhcmVjb2xsLmJubC5pdIIidXMtaXNzdWluZ2FuZHBheWluZy5ibnBwYXJp
YmFzLmNvbYIhdGVtcG9yYWlyZS1yZXVuaW9uLmJucHBhcmliYXMubmV0giNzdGdy
ZXBvcnRkb3dubG9hZGVyLnByaW1lYnJva2VyLmNvbYIac3RnbW9uaXRvci5wcmlt
ZWJyb2tlci5jb22CHXN0Z2JucHBhcmliYXMucHJpbWVicm9rZXIuY29tgiBzdGdi
bnBwYXJpYmFzLXBiLnByaW1lYnJva2VyLmNvbYIhc3RkMDcuZm9ybWF0aW9uLmFr
YXRlc3QucGlsYXguY29tgiRzdGQwNy1ldS5mb3JtYXRpb24uYWthdGVzdC5waWxh
eC5jb22CF3N0YWdpbmcucHJpbWVicm9rZXIuY29tghZzc29yZWMuYWxsZnVuZHMt
YmMuY29tghpzc29sb2dpbnJlYy5ibnBwYXJpYmFzLmNvbYIcc3NvbG9naW4tYnAy
cy5ibnBwYXJpYmFzLmNvbYITc3NvLmFsbGZ1bmRzLWJjLmNvbYIXc2VydmljaW9z
d2ViLmNldGVsZW0uZXOCHXNlY3VyaXRpZXNjb3JwLmJucHBhcmliYXMuY29tghZy
ZXVuaW9uLmJucHBhcmliYXMubmV0gg9wcmltZWJyb2tlci5jb22CHnByZXByb2Qu
d2VhcmV0ZW5uaXMuYm5wcGFyaWJhc4IYcG9zdHZlbnRhYXV0by5jZXRlbGVtLmVz
giJwb3J0YWxici51cy1jaWItZ3RtLmJucHBhcmliYXMuY29tghltb2JpbGVpY3Mu
cHJpbWVicm9rZXIuY29tghJpc2EuYm5wcGFyaWJhcy5jb22CImlicHNzb2JyLnVz
LWNpYi1ndG0uYm5wcGFyaWJhcy5jb22CFGliLmJucHBhcmliYXMuY29tLmJyghZo
c3AtcHBkLmJucHBhcmliYXMuY29tghZnb2QtcmVjLmJucHBhcmliYXMuY29tgh5n
ZW9kZS5wb3J0YWlsLWludmVzdGlzc2V1ci5jb22CGWdlb2RlLWJwMnMuYm5wcGFy
aWJhcy5jb22CHmdjdGFic3JlcG9ydGluZy5ibnBwYXJpYmFzLmNvbYIZZnVuZHdl
YnVhdC5ibnBwYXJpYmFzLmNvbYImZW50cmVwcmlzZXMtZXJlLnN0YWdpbmcuYm5w
cGFyaWJhcy5jb22CEmN2dy5ibnBwYXJpYmFzLmNvbYIjY29ubmV4aXNhY2guYW1l
cmljYXMuYm5wcGFyaWJhcy5jb22CH2NvbW1vZGl0eWZ1dHVyZXMuYm5wcGFyaWJh
cy5jb22CI2NvbW1vZGl0eWZ1dHVyZXMtcmVjLmJucHBhcmliYXMuY29tggpjZXRl
bGVtLmVzgiJjZXJjbGUtYWN0aW9ubmFpcmVzLmJucHBhcmliYXMuY29tgh5jZXJj
bGUtYWN0aW9ubmFpcmVzLmJucHBhcmliYXOCImNkbi5jZXJjbGUtYWN0aW9ubmFp
cmVzLmJucHBhcmliYXOCLWNkbi5iYWNrb2ZmaWNlLmNlcmNsZS1hY3Rpb25uYWly
ZXMuYm5wcGFyaWJhc4IiY2RuLXByZXByb2Qud2VhcmV0ZW5uaXMuYm5wcGFyaWJh
c4IdY2RuLWJvLndlYXJldGVubmlzLmJucHBhcmliYXOCJWNkbi1iby1wcmVwcm9k
LndlYXJldGVubmlzLmJucHBhcmliYXOCHGNkYy5wb3J0YWlsLWludmVzdGlzc2V1
ci5jb22CIGNkYy1yZWMucG9ydGFpbC1pbnZlc3Rpc3NldXIuY29tghliby53ZWFy
ZXRlbm5pcy5ibnBwYXJpYmFzgiFiby1wcmVwcm9kLndlYXJldGVubmlzLmJucHBh
cmliYXOCEWJucHBhcmliYXMuY29tLmFygh1ibnBwYXJpYmFzLXBiLnByaW1lYnJv
a2VyLmNvbYIVYm5wMDdzLmJucHBhcmliYXMuY29tghViZHMtcGIuYm5wcGFyaWJh
cy5jb22CI2Jhc2ljMDcuZm9ybWF0aW9uLmFrYXRlc3QucGlsYXguY29tgiZiYXNp
YzA3LWV1LmZvcm1hdGlvbi5ha2F0ZXN0LnBpbGF4LmNvbYIpYmFja29mZmljZS5j
ZXJjbGUtYWN0aW9ubmFpcmVzLmJucHBhcmliYXOCD2F1dG8uY2V0ZWxlbS5lc4Il
YXV0aGVudGljYXRpb24uc3RhZ2luZy5ibnBwYXJpYmFzLmNvbTAOBgNVHQ8BAf8E
BAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGLBgNVHR8EgYMw
gYAwPqA8oDqGOGh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JT
QVNIQTI1NjIwMjBDQTEuY3JsMD6gPKA6hjhodHRwOi8vY3JsNC5kaWdpY2VydC5j
b20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLmNybDBMBgNVHSAERTBDMDcG
CWCGSAGG/WwBATAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5j
b20vQ1BTMAgGBmeBDAECAjB9BggrBgEFBQcBAQRxMG8wJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBHBggrBgEFBQcwAoY7aHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0RpZ2lDZXJ0VExTUlNBU0hBMjU2MjAyMENBMS5jcnQw
DAYDVR0TAQH/BAIwADATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAADTEefWdQ1gshsa4RO2x2ciuhWRmPdEJjVnYeyV8wXFjr8Lf1w/gDR4v
kQnJ46MVBtXj1XWNwTfIeqNVszbYOcwpzJLHAI7LzlcRSg3NkU2Ff2YaXeQgGyQv
Henjne0j9EKmnox63gS/LokNuGw44COysO9xPfQHrK4nBbXt3Nw0SKiKs9KKjQ3R
cS8z91T53iW+RXkwEzo8xFXMjHTBc3QtpRXR7VUv3ETmsnJk/HgtdOsXd2uLEO0P
NC7p7NpCuVoWHivWY/emUZcxWGI9sX5XNaKXAKBXZogJTrEExsUlZ5L8dd5rawWQ
KA2E7bzEjxP6bwAIs2/h/NcslaZgjQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kRFzkq9uu6MIbi7TDPa
Ov1boymYQTFpK9QbCerAr55olOdY5p2GDZvojjH7Gt5agmzlqTmM6fZis3QXrNzx
oM18zBJ7pKpShOL8s1sJoTpSEnuLHR5bwtzZqGDv4tAXCHM/1J60oo9/1jyqhsIb
8enmVYUjxGafq4J4KO5uUsVjRGqAAahGGlYeQIkzYIs3HurO6bJH+4dnOUN9Du+p
RoyCRJPLb6S6qs0b1VD8jHPWeaPxbHYmX/hHKIdvMenLNn4yVp5PSsZxeR6PfosK
3JKf7wm+cNAUq4/lPQykS+QbcbbV+4fKpzBYMSiGXQk+6GYNwuvEXjqjPVCCRS70
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5437563519426225251081613429783492134
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp07s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29068476654984124436292329668327975656866926746105269031578583861353113867183396887384503688318172191553952935476826385379354166292990809794704561506305374930376224231874917488591374075936859812417873713342781439603468624773517990764103145329115226451705355374140286385138416513434557651149958734174751512228892080684512511416534987789589220627989077213992608641854799100849113195055446201478934892124409767098630077953352209359373913900638492376894239147647116683424702283258780321164794281331872381117228342214492685148629052551146548428720102807164133146642237087082237953610045339859870785027426148315276807959707
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c45cfeaf9c103be1922d6dfa899c831073cea04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2335 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.zonacliente.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.france-titrisation.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact2.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cifact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakerscoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wellmakers.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welfarecoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuingandpaying.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'temporaire-reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'std07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssorec.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologinrec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssologin-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.allfunds-bc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'serviciosweb.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securitiescorp.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reunion.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'postventaauto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portalbr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileics.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isa.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ibpssobr.us-cib-gtm.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ib.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hsp-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'god-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geode-bp2s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fundwebuat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'entreprises-ere.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexisach.americas.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-rec.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-preprod.wearetennis.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp07s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bds-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basic07-eu.formation.akatest.pilax.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'backoffice.cercle-actionnaires.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'authentication.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (131 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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