cdc-securities-link.portail-investisseur.com

- BNP PARIBAS SA -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 57:e8:85:bd:26:39:57:bf:d6:65:74:a7:07:91:ac:44 was issued on by Symantec Corporation.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Organization unit: IS - BNPP Securities Services
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 57:e8:85:bd:26:39:57:bf:d6:65:74:a7:07:91:ac:44
Serial Number (int): 116850161050897515350166636126654278724
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 75:56:8d:3c:35:df:b1:8a:db:2b:35:df:0a:11:2e:bf:e9:14:56:8f
Fingerprint (sha256): 63:7a:53:99:25:a4:e2:13:0f:01:a9:8d:dd:d6:1d:da:eb:a4:33:78:70:6c:98:2d:7d:13:2a:e4:b5:8e:c8:b0

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate cdc-securities-link.portail-investisseur.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cdc-securities-link.portail-investisseur.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securities-link.bnpparibas.com
pblink.bnpparibas.com
org-securities-link.bnpparibas.com
commodityfutures-link.bnpparibas.com
cdc-securities-link.portail-investisseur.com

Other certificates including the domain name portail-investisseur.com

(limited to 100 certificates)
cdc-rec.portail-investisseur.com
cdc-securities-link.portail-investisseur.com
cdc-securities-help-link.portail-investisseur.com
cdc-securities-help-link.portail-investisseur.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
pblink-ppd.bnpparibas.com
ssowhite.is.bnpparibas.com
bnp10s.bnpparibas.com
cdc-rec.portail-investisseur.com
securitiesrec-neolink.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-archive.portail-investisseur.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
cdc.portail-investisseur.com
cdc-rec.portail-investisseur.com
geode-bp2s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
neolink-ppd.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-archive.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-archiverec.portail-investisseur.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnpsspremiumnonprod.bnpparibas.com
bnp10b.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-securities-help-link.portail-investisseur.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
cdc.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10b.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities-link.portail-investisseur.com
myreportsrec-client.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
helprec.bp2s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
cdc-securities-link.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
dnarec.bnpparibas.com
cdc-securities.portail-investisseur.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
securities-client.bnpparibas.com
bnp10s.bnpparibas.com
bnp10s.bnpparibas.com
bnp07s.bnpparibas.com
bnp10s.bnpparibas.com
securitiesrec-client.bp2s.bnpparibas.com
cdc.portail-investisseur.com

Certificate

The complete raw certificate details for cdc-securities-link.portail-investisseur.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApW0wlfH8CROebW0qWla8
I1rzZJMZ0NxTzNiWnZ+ldnEJY394C6eSl2HFOCHpMCMkmw6pdELHNWX/5EjbkV3w
xYlmtme9pUjVWUQ3lF1pRcNXje7staKDD8/mXH9j1Q8YDpSDMjojdbsNTlLW0aG1
yIW2BhtqcL2t4lMZHKjGCxxUvBMEAyCShNg/TYHqoCa4gIddQAYr2su7XWq9OwST
CSYqejkKzBmfIY5sDQMXHAomxuyPrw6kKpliWU1ri5qXS1MF2CNuNpV81HgUraGh
HuuSWGslr9aF1hEkKcR2E1NukHRHI2N3evNVEpm1+Qm/j5AjEZn2bvyV3JVVDwrv
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 116850161050897515350166636126654278724
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IS - BNPP Securities Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cdc-securities-link.portail-investisseur.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20883163810628475844225273242171378139543193724729479937539683319433140979961485441815215075001744156707782652094136274243347388353208600718012388800859067622575085987798168338632288067202886818755483428566664318572496943278685821787364444402973175064435965290375012900383736185060486788183349464947219914443295595019550372403772223766157479343033907796112829481273535272728947565640349934377606323364255334217803933233981190446362391731701005327044472337144702006459150558211610985482719269235773771817058292995444361159425887834576315325518915440155660044560879717635037315982146469556677712667632083876340982017831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (178 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securities-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pblink.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'org-securities-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'commodityfutures-link.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdc-securities-link.portail-investisseur.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015a93dfa419000004030047304502206cf5db2b477872abe79319b99ebc8dcec388d27fdd00f0f957aed908f3e09f91022100f1afe87f23f8d2ae3b931cc0e06df985dcc5e3162e21690163493e8635f6e8ee007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015a93dfa44000000403004730450220303a9ba7fc79e64c2feb1132f8618a2e59fe0ff2e425431932efc5f9d7b7f21d022100d67bcb30b615a7f097bff68e22d41744146d397148be1f18535ff9108efa9007
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0085ddf26904e252400f69dbe9f95d0403dc68bfd32077175e1f88f40f836d554b9988f9bbcd02cde60f806bae6ef15899cd24efc3a80696b8ae935025621ebf2129e0a219d860fc8c441db8ea5c3aeb8c39a35ef16a678328ec59c75abbd68c1ba23b54573e929cc8a8747c4fb3b50292bb74df2d22cff147790e11134383f133018ce378006c20df92fdcae2b3928fa579cf794c86689a2ed2000547ed8a5e9cf87d3e172f74be5f451958c88b6adfd66400ffeaa9ffadb6939e38964be244ede754196e826099f9e4fae3f95622892a0711db38c2af40282f67c7083ff32867bf5e56a7f083bc7dced62461b3ac3c77983de2d58ff941650338840a2f73ba7e