bnp10s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:22:7d:10:ba:2a:31:7a:b1:47:1c:d6:e2:23:c5:d2 was issued on by DigiCert Inc.

With 84 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:22:7d:10:ba:2a:31:7a:b1:47:1c:d6:e2:23:c5:d2
Serial Number (int): 14800582673290535798772954832021210578
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 4d:21:b4:6f:39:dc:38:09:bf:0b:d3:f3:13:a1:e9:07:7d:c6:d0:2d
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): bd:87:88:78:70:30:95:cf:b7:65:3d:5a:b4:0d:e4:32:5c:5f:78:20
Fingerprint (sha256): 5e:dc:80:db:cb:e5:f3:85:31:ef:07:4e:7f:d2:53:df:fc:63:b0:ca:4e:4a:eb:55:52:c9:6b:05:38:c0:50:e2

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp10s.bnpparibas.com

84

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp10s.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp10s.bnpparibas.com
accountx2ca.bnl.it
agw-services.staging.bnpparibascardif.it
api-gtw.dev.nickel.eu
api-gtw.nickel.eu
api-gtw.staging.nickel.eu
api.irb.algeria.staging.bnpparibas.com
artigianonline.artigiancassa.it
auto.signature.neuges.org
bo-nickel-alpha.abm-uid.com
bo-nickel.preprod.abm-uid.com
careers.apac.bnpparibas
cdc-archive.portail-investisseur.com
cetelem-esignrc.bnpparibas-pf.com
courtier-sygma-esignrc.bnpparibas-pf.com
customer-call-center-api.abm-uid.com
customer-registration-admin-api.abm-uid.com
customer-registration-control-bo.abm-uid.com
devenir-distributeur.preprod.compte-nickel.fr
devenir-distributeur.staging.compte-nickel.fr
emprunteur.signature.neuges.org
etranplus.bnpparibas.com
filebox.smsps-coll.bnl.it
financ.it
financit.it
fzw-ppd.bnpparibas.com
fzw.bnpparibas.com
gm-graduate-careers.apac.bnpparibas
mobile.preprod.domofinance.com
mobileservices2.bgl.lu
mon-alpha.compte-nickel.fr
mpad-prod.preprod.abm-uid.com
mpad-prod.staging.abm-uid.com
partenaires.preprod.domofinance.com
partenaires.qualif.domofinance.com
partinst-esignrc.bnpparibas-pf.com
pass-portal.staging.bnpparibascardif.it
preprod.domofinance.com
prescripteur.signature.neuges.org
qualif.domofinance.com
signature-vad.domofinance.com
signature.cetelem.fr
sygma-esignrc.bnpparibas-pf.com
tablet-nickel.preprod.abm-uid.com
tablet-nickel.staging.abm-uid.com
tabletnickel-service.abm-uid.com
telepassxbiz.com
telepassxbiz.it
webdoc-ci.bicicinet.net
webdoc-ci.bnpparibas.com
webdoc-dz.staging.bnpparibas.net
webdoc-sn.bicisnet.net
webdoc-sn.bnpparibas.com
widgets.preprod.compte-nickel.fr
widgets.staging.compte-nickel.fr
ws-ext-esendex.preprod.nickel.eu
ws-ext-esendex.staging.nickel.eu
ws-ext-infobip.preprod.nickel.eu
ws-ext-infobip.staging.nickel.eu
ws-ext-monext-tokenizer.nickel.eu
ws-ext-monext-tokenizer.preprod.nickel.eu
ws-ext-monext-tokenizer.staging.nickel.eu
ws-ext-monext.preprod.nickel.eu
ws-ext-onfido.nickel.eu
ws-ext-onfido.preprod.nickel.eu
ws-ext-pinsms.preprod.nickel.eu
ws-ext-pinsms.staging.nickel.eu
ws-ext-webapptibco.preprod.nickel.eu
ws-ext-webapptibco.staging.nickel.eu
www.accountx2ca.bnl.it
www.api.irb.algeria.staging.bnpparibas.com
www.artigianonline.artigiancassa.it
www.financ.it
www.financit.it
www.pass-portal.staging.bnpparibascardif.it
www.preprod.domofinance.com
www.qualif.domofinance.com
www.staging.nickel.eu
www.telepassxbiz.it
www.webdoc-ci.bicicinet.net
www.webdoc-ci.bnpparibas.com
www.webdoc-dz.staging.bnpparibas.net
www.webdoc-sn.bicisnet.net
www.webdoc-sn.bnpparibas.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com

Certificate

The complete raw certificate details for bnp10s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPcDCCDligAwIBAgIQCyJ9ELoqMXqxRxzW4iPF0jANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAzMTAwMDAwMDBa
Fw0yMzA1MTAyMzU5NTlaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUg
RnJhbmNlMRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFT
IFNBMR4wHAYDVQQDExVibnAxMHMuYm5wcGFyaWJhcy5jb20wggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDjjOlMjbg2cZYRVWgHCzpgkzLTQEs7SHreCkNI
4VBNv3HeQY8HUbipKp9vecnBb6KCIbBGlnpP7nu+xpFwQvdgEtczWa9RcJYPybPv
SvNu4ESyCE896PbG+dROMaqo/muJLywV5AxTtam5DxXFw5XWjXnspIZFYKdHd3WF
UzY8FiZ0t1rNSmA2ZWPVsq3cZHLcN2xyRhw7qymNcaLfOGD53grQPJT9m7Wfa5JK
vqFpzxTfZI1OtjKoZoyvH4qTUg3HyYhBFo8UATmF4SJREP7Wc0IWzL/zik9vU26M
tGU2F4TbHiYBCuDOstPsyVG6bVof4NuWkgbieCpi8GcJzaaRAgMBAAGjggwjMIIM
HzAfBgNVHSMEGDAWgBS3a6LqqKqEjHnqtNoPmLLFlXa59DAdBgNVHQ4EFgQUTSG0
bzncOAm/C9PzE6HpB33G0C0wggo5BgNVHREEggowMIIKLIIVYm5wMTBzLmJucHBh
cmliYXMuY29tghJhY2NvdW50eDJjYS5ibmwuaXSCKGFndy1zZXJ2aWNlcy5zdGFn
aW5nLmJucHBhcmliYXNjYXJkaWYuaXSCFWFwaS1ndHcuZGV2Lm5pY2tlbC5ldYIR
YXBpLWd0dy5uaWNrZWwuZXWCGWFwaS1ndHcuc3RhZ2luZy5uaWNrZWwuZXWCJmFw
aS5pcmIuYWxnZXJpYS5zdGFnaW5nLmJucHBhcmliYXMuY29tgh9hcnRpZ2lhbm9u
bGluZS5hcnRpZ2lhbmNhc3NhLml0ghlhdXRvLnNpZ25hdHVyZS5uZXVnZXMub3Jn
ghtiby1uaWNrZWwtYWxwaGEuYWJtLXVpZC5jb22CHWJvLW5pY2tlbC5wcmVwcm9k
LmFibS11aWQuY29tghdjYXJlZXJzLmFwYWMuYm5wcGFyaWJhc4IkY2RjLWFyY2hp
dmUucG9ydGFpbC1pbnZlc3Rpc3NldXIuY29tgiFjZXRlbGVtLWVzaWducmMuYm5w
cGFyaWJhcy1wZi5jb22CKGNvdXJ0aWVyLXN5Z21hLWVzaWducmMuYm5wcGFyaWJh
cy1wZi5jb22CJGN1c3RvbWVyLWNhbGwtY2VudGVyLWFwaS5hYm0tdWlkLmNvbYIr
Y3VzdG9tZXItcmVnaXN0cmF0aW9uLWFkbWluLWFwaS5hYm0tdWlkLmNvbYIsY3Vz
dG9tZXItcmVnaXN0cmF0aW9uLWNvbnRyb2wtYm8uYWJtLXVpZC5jb22CLWRldmVu
aXItZGlzdHJpYnV0ZXVyLnByZXByb2QuY29tcHRlLW5pY2tlbC5mcoItZGV2ZW5p
ci1kaXN0cmlidXRldXIuc3RhZ2luZy5jb21wdGUtbmlja2VsLmZygh9lbXBydW50
ZXVyLnNpZ25hdHVyZS5uZXVnZXMub3JnghhldHJhbnBsdXMuYm5wcGFyaWJhcy5j
b22CGWZpbGVib3guc21zcHMtY29sbC5ibmwuaXSCCWZpbmFuYy5pdIILZmluYW5j
aXQuaXSCFmZ6dy1wcGQuYm5wcGFyaWJhcy5jb22CEmZ6dy5ibnBwYXJpYmFzLmNv
bYIjZ20tZ3JhZHVhdGUtY2FyZWVycy5hcGFjLmJucHBhcmliYXOCHm1vYmlsZS5w
cmVwcm9kLmRvbW9maW5hbmNlLmNvbYIWbW9iaWxlc2VydmljZXMyLmJnbC5sdYIa
bW9uLWFscGhhLmNvbXB0ZS1uaWNrZWwuZnKCHW1wYWQtcHJvZC5wcmVwcm9kLmFi
bS11aWQuY29tgh1tcGFkLXByb2Quc3RhZ2luZy5hYm0tdWlkLmNvbYIjcGFydGVu
YWlyZXMucHJlcHJvZC5kb21vZmluYW5jZS5jb22CInBhcnRlbmFpcmVzLnF1YWxp
Zi5kb21vZmluYW5jZS5jb22CInBhcnRpbnN0LWVzaWducmMuYm5wcGFyaWJhcy1w
Zi5jb22CJ3Bhc3MtcG9ydGFsLnN0YWdpbmcuYm5wcGFyaWJhc2NhcmRpZi5pdIIX
cHJlcHJvZC5kb21vZmluYW5jZS5jb22CIXByZXNjcmlwdGV1ci5zaWduYXR1cmUu
bmV1Z2VzLm9yZ4IWcXVhbGlmLmRvbW9maW5hbmNlLmNvbYIdc2lnbmF0dXJlLXZh
ZC5kb21vZmluYW5jZS5jb22CFHNpZ25hdHVyZS5jZXRlbGVtLmZygh9zeWdtYS1l
c2lnbnJjLmJucHBhcmliYXMtcGYuY29tgiF0YWJsZXQtbmlja2VsLnByZXByb2Qu
YWJtLXVpZC5jb22CIXRhYmxldC1uaWNrZWwuc3RhZ2luZy5hYm0tdWlkLmNvbYIg
dGFibGV0bmlja2VsLXNlcnZpY2UuYWJtLXVpZC5jb22CEHRlbGVwYXNzeGJpei5j
b22CD3RlbGVwYXNzeGJpei5pdIIXd2ViZG9jLWNpLmJpY2ljaW5ldC5uZXSCGHdl
YmRvYy1jaS5ibnBwYXJpYmFzLmNvbYIgd2ViZG9jLWR6LnN0YWdpbmcuYm5wcGFy
aWJhcy5uZXSCFndlYmRvYy1zbi5iaWNpc25ldC5uZXSCGHdlYmRvYy1zbi5ibnBw
YXJpYmFzLmNvbYIgd2lkZ2V0cy5wcmVwcm9kLmNvbXB0ZS1uaWNrZWwuZnKCIHdp
ZGdldHMuc3RhZ2luZy5jb21wdGUtbmlja2VsLmZygiB3cy1leHQtZXNlbmRleC5w
cmVwcm9kLm5pY2tlbC5ldYIgd3MtZXh0LWVzZW5kZXguc3RhZ2luZy5uaWNrZWwu
ZXWCIHdzLWV4dC1pbmZvYmlwLnByZXByb2Qubmlja2VsLmV1giB3cy1leHQtaW5m
b2JpcC5zdGFnaW5nLm5pY2tlbC5ldYIhd3MtZXh0LW1vbmV4dC10b2tlbml6ZXIu
bmlja2VsLmV1gil3cy1leHQtbW9uZXh0LXRva2VuaXplci5wcmVwcm9kLm5pY2tl
bC5ldYIpd3MtZXh0LW1vbmV4dC10b2tlbml6ZXIuc3RhZ2luZy5uaWNrZWwuZXWC
H3dzLWV4dC1tb25leHQucHJlcHJvZC5uaWNrZWwuZXWCF3dzLWV4dC1vbmZpZG8u
bmlja2VsLmV1gh93cy1leHQtb25maWRvLnByZXByb2Qubmlja2VsLmV1gh93cy1l
eHQtcGluc21zLnByZXByb2Qubmlja2VsLmV1gh93cy1leHQtcGluc21zLnN0YWdp
bmcubmlja2VsLmV1giR3cy1leHQtd2ViYXBwdGliY28ucHJlcHJvZC5uaWNrZWwu
ZXWCJHdzLWV4dC13ZWJhcHB0aWJjby5zdGFnaW5nLm5pY2tlbC5ldYIWd3d3LmFj
Y291bnR4MmNhLmJubC5pdIIqd3d3LmFwaS5pcmIuYWxnZXJpYS5zdGFnaW5nLmJu
cHBhcmliYXMuY29tgiN3d3cuYXJ0aWdpYW5vbmxpbmUuYXJ0aWdpYW5jYXNzYS5p
dIINd3d3LmZpbmFuYy5pdIIPd3d3LmZpbmFuY2l0Lml0git3d3cucGFzcy1wb3J0
YWwuc3RhZ2luZy5ibnBwYXJpYmFzY2FyZGlmLml0ght3d3cucHJlcHJvZC5kb21v
ZmluYW5jZS5jb22CGnd3dy5xdWFsaWYuZG9tb2ZpbmFuY2UuY29tghV3d3cuc3Rh
Z2luZy5uaWNrZWwuZXWCE3d3dy50ZWxlcGFzc3hiaXouaXSCG3d3dy53ZWJkb2Mt
Y2kuYmljaWNpbmV0Lm5ldIIcd3d3LndlYmRvYy1jaS5ibnBwYXJpYmFzLmNvbYIk
d3d3LndlYmRvYy1kei5zdGFnaW5nLmJucHBhcmliYXMubmV0ghp3d3cud2ViZG9j
LXNuLmJpY2lzbmV0Lm5ldIIcd3d3LndlYmRvYy1zbi5ibnBwYXJpYmFzLmNvbTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGP
BgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9EaWdp
Q2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9jcmw0
LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmww
PgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYYaHR0
cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2FjZXJ0
cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEuY3J0
MAkGA1UdEwQCMAAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAAr6rhp418fkWUgP8kbAqn6PhQXoxzF2Q6r6rVG3usGQsmk093BjSoqyqD50
2X/7IQgrP2fvys3PAQVKiUVFbDfWW0pUrPVVPzyImyVmyEJHIH5r+UYbGV9FRQzm
Nod+e7GY/CX0kd5/qEA+inW8iYW3A99Ab2sWOjwvAyEv6xdlplq1ro+1uq1ybt7D
b2xOULpFXVtJSRdb9IH8IRwgpj642w3hnBRLnLP+WUYWad1leK+eOuRk7lR/GFcK
DCl87/w0T5oOI4cdNrgx2nzPg28zSAgZha29SalUxWGIYrGi+RtO/2RUi23Z/fIk
D0R/2LMG1RwYhW700zc9ori/wbo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44zpTI24NnGWEVVoBws6
YJMy00BLO0h63gpDSOFQTb9x3kGPB1G4qSqfb3nJwW+igiGwRpZ6T+57vsaRcEL3
YBLXM1mvUXCWD8mz70rzbuBEsghPPej2xvnUTjGqqP5riS8sFeQMU7WpuQ8VxcOV
1o157KSGRWCnR3d1hVM2PBYmdLdazUpgNmVj1bKt3GRy3DdsckYcO6spjXGi3zhg
+d4K0DyU/Zu1n2uSSr6hac8U32SNTrYyqGaMrx+Kk1INx8mIQRaPFAE5heEiURD+
1nNCFsy/84pPb1NujLRlNheE2x4mAQrgzrLT7MlRum1aH+DblpIG4ngqYvBnCc2m
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14800582673290535798772954832021210578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp10s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28725581191117082529458454240306044115662298698494761346844051585818215204148093513025852024306582389419242951942451317749353392141795487816239322753825497957858666082997288930381903453129736758296290942552932538738655395547510589733192733710373525710515314047717743092767588497918026652166450942954637835920926266827312576790604405862542315586652332730770552327362164071558199247000605323473750832593976642957734944951472735764690752045690853386711802765239758727750065881201969290412782818908754887921837124307653703610781586220217422732924012569421899889839623098214992706366540814946191807440094612737647321130641
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d21b46f39dc3809bf0bd3f313a1e9077dc6d02d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2608 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp10s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agw-services.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-gtw.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auto.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel-alpha.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bo-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-archive.portail-investisseur.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtier-sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-call-center-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-admin-api.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'customer-registration-control-bo.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'devenir-distributeur.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emprunteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'etranplus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'filebox.smsps-coll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fzw.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gm-graduate-careers.apac.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileservices2.bgl.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mon-alpha.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mpad-prod.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partenaires.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partinst-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prescripteur.signature.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature-vad.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signature.cetelem.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygma-esignrc.bnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.preprod.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tablet-nickel.staging.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tabletnickel-service.abm-uid.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.preprod.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'widgets.staging.compte-nickel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-esendex.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-infobip.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext-tokenizer.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-monext.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-onfido.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-pinsms.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.preprod.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-ext-webapptibco.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.accountx2ca.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.api.irb.algeria.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.artigianonline.artigiancassa.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financ.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.financit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pass-portal.staging.bnpparibascardif.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.preprod.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qualif.domofinance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.telepassxbiz.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bicicinet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-ci.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-dz.staging.bnpparibas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bicisnet.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.webdoc-sn.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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