group.bnpparibas

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:0b:f4:85:a7:d4:86:d4:15:8c:9b:65:1c:11:ed:24 was issued on by DigiCert Inc.

With 34 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: Montreuil
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:0b:f4:85:a7:d4:86:d4:15:8c:9b:65:1c:11:ed:24
Serial Number (int): 20000494699447452225505447285546413348
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 27:93:67:45:d8:ff:a6:59:65:1f:04:a2:c1:c6:16:95:c0:70:66:b7
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 15:26:b5:15:1d:0b:2c:76:3d:e1:22:50:9d:7c:7e:4c:da:00:13:a1
Fingerprint (sha256): aa:2b:b9:21:54:d7:34:1e:1f:92:c3:2a:c7:de:ae:f1:83:6c:dd:e8:e1:8c:d7:66:ea:0c:96:33:e4:7a:e9:1a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate group.bnpparibas

34

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for group.bnpparibas

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

group.bnpparibas
bnpparibas.com
careers.bnpparibas
careers.bnpparibas.com
carrieres.bnpparibas
cdn-actus.bnpparibas.com
cdn-com.bnpparibas.com
cdn-group.bnpparibas.com
cinema.bnpparibas.com
climate-initiative.bnpparibas.com
compresse.bnpparibas.com
emploi-carrieres.bnpparibas.com
espacepresse.bnpparibas.com
fondation.bnpparibas
fondation.bnpparibas.com
foundation.bnpparibas.com
recrutement.bnpparibas
recrutement.bnpparibas.com
www.bnpparibas.com
www.careers.bnpparibas
www.careers.bnpparibas.com
www.carrieres.bnpparibas
www.cdn-com.bnpparibas.com
www.cdn-group.bnpparibas.com
www.cinema.bnpparibas.com
www.climate-initiative.bnpparibas.com
www.emploi-carrieres.bnpparibas.com
www.espacepresse.bnpparibas.com
www.fondation.bnpparibas
www.fondation.bnpparibas.com
www.foundation.bnpparibas.com
www.group.bnpparibas
www.recrutement.bnpparibas
www.recrutement.bnpparibas.com

Other certificates including the domain name group.bnpparibas

(limited to 100 certificates)
group.bnpparibas.com
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas.com
cdn-preprod-origin.group.bnpparibas
origin.group.bnpparibas
origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
preprod-origin.group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
sso-origin.group.bnpparibas
group.bnpparibas
cdn-preprod-origin.group.bnpparibas
matchmycv.group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas
preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
www.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
www.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
ls.leasingsolutions.devp.api.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
cvcatcher.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas
group.bnpparibas.com
group.bnpparibas.com
mailhog.contrib-preprod-origin.group.bnpparibas
group.bnpparibas
sso-contrib-preprod-origin.group.bnpparibas
group.bnpparibas
contrib-preprod-origin.group.bnpparibas
contrib-preprod-origin.group.bnpparibas
group.bnpparibas
origin.group.bnpparibas

Certificate

The complete raw certificate details for group.bnpparibas in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEaViEa0Hk/E7hHg7Xjy7gpuRHD6hF
mvw+esVxjkOqepmf6EI1raCaUGIW+XY7FS1/XBtiti1mbC4/mILP8X03Ow==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20000494699447452225505447285546413348
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'group.bnpparibas'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00046958846b41e4fc4ee11e0ed78f2ee0a6e4470fa8459afc3e7ac5718e43aa7a999fe84235ada09a506216f9763b152d7f5c1b62b62d666c2e3f9882cff17d373b
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							27936745d8ffa659651f04a2c1c61695c07066b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (914 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'group.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'carrieres.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-actus.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-com.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn-group.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cinema.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'climate-initiative.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compresse.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emploi-carrieres.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espacepresse.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fondation.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'foundation.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recrutement.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careers.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.carrieres.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn-com.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cdn-group.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cinema.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.climate-initiative.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emploi-carrieres.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espacepresse.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondation.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fondation.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.foundation.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.group.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recrutement.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recrutement.bnpparibas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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