bnp08s.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:51:4c:96:58:6b:af:7f:9e:38:57:92:b2:d4:6a:53 was issued on by DigiCert Inc.

With 90 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Ile de France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:51:4c:96:58:6b:af:7f:9e:38:57:92:b2:d4:6a:53
Serial Number (int): 1751357416045356272666725948402723411
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 9f:67:54:e6:54:4d:08:93:7b:97:37:10:d5:09:a6:a7:39:c0:c7:18
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 86:e6:27:f1:6f:c0:21:b6:ea:46:db:72:48:39:ba:b9:6b:bd:19:e5
Fingerprint (sha256): f3:b0:82:7a:b6:30:93:51:73:5b:3b:e0:e4:96:aa:8b:45:e5:45:68:11:6b:8d:df:d8:4b:24:07:8c:88:51:fc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp08s.bnpparibas.com

90

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp08s.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp08s.bnpparibas.com
agora-prd.bnpparibas.com
alis.v16.dev.staging.bnpparibas
antilles-guyane.bnpparibas
api.alpha.nickel.eu
api.dev.nickel.eu
app.alpha.nickel.eu
assinaturadigital.bnpparibas.com.br
b2ctest.ecredit.it
biciab.bf
bicibourse.com
bicigui.org
bnppam-private.staging.bnpparibas.com
bnpparibas.nc
bnpparibas.re
boleto.bnpparibas.com.br
business.bnl.it
car.bnpparibas-am.com
central.antilles-guyane.bnpparibas
connexion.ere.bnpparibas
connexion.ere.staging.bnpparibas
corporatesac.bnl.it
corporatesacaemcoll.bnl.it
creditclick.fr
cts-lra.bnpparibas.com
demo-directeo.epargne-retraite-entreprises.bnpparibas.com
demo-monepargne.ere.bnpparibas
demo-monepargne.ere.staging.bnpparibas
demo-monere-api.ere.bnpparibas
demo-monere-api.ere.staging.bnpparibas
demo-personeo.epargne-retraite-entreprises.bnpparibas.com
directeo.epargne-retraite-entreprises.bnpparibas.com
documentexchangeconnect-internet.sso-stg.bnpparibas.com
documentexchangeconnect.bnpparibas.com
ebroker.sygmabnpparibas-pf.com
ereceipt2centric-cn.asia.bnpparibas.com
ereceipt2centric.asia.bnpparibas.com
ereporting.asia.bnpparibas.com
fxpb-dr.bnpparibas.com
fxpb.staging.bnpparibas.com
ges-pb.bnpparibas.com
ges.bnpparibas.com
irb-central.bnpparibas.com
jss.bnpparibas
mbswl-uat.bnpparibas.com
mbswl.bnpparibas.com
media.youmanist.bnl.it
media.youmanist.it
mediana.ifitalia.it
mobile.personeo.epargne-retraite-entreprises.bnpparibas.com
monepargne.ere.bnpparibas
monepargne.ere.staging.bnpparibas
monitor.primebroker.com
myfpx.bnpparibas.com
oms-uat.primebroker.com
personeo.epargne-retraite-entreprises.bnpparibas.com
portaldigital.bnpparibas.com.br
private.staging.bnpparibas-am.com
privatebanking.bnpparibas.it
privatebankingaemcoll.bnl.it
rapport-sustainability.bnpparibas-am.com
recebiveis-stg.bnpparibas.com.br
recebiveis.bnpparibas.com
sgrboletoissuance-stg.bnpparibas.com.br
ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com
staging.workspace.realestate.bnpparibas.com
stgges.bnpparibas.com
sustainability-report.bnpparibas-am.com
sygmabnpparibas-pf.com
thailandsocialsecurity.bnpparibas.com
thailandsocialsecurity.staging.bnpparibas.com
us-issuing.paying.rec.bnpparibas.com
vra.bnpparibas.com
www.antilles-guyane.bnpparibas
www.assinaturadigital.bnpparibas.com.br
www.biciab.bf
www.bicibourse.com
www.bicigui.org
www.bnpparibas.nc
www.bnpparibas.re
www.central.antilles-guyane.bnpparibas
www.creditclick.fr
www.cts-lra.bnpparibas.com
www.irb-central.bnpparibas.com
www.mediana.ifitalia.it
www.portaldigital.bnpparibas.com.br
www.privatebanking.bnpparibas.it
www.privatebankingaemcoll.bnl.it
www.rapport-sustainability.bnpparibas-am.com
www.sustainability-report.bnpparibas-am.com

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp08s.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQsTCCD5mgAwIBAgIQAVFMllhrr3+eOFeSstRqUzANBgkqhkiG9w0BAQsFADBP
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMSkwJwYDVQQDEyBE
aWdpQ2VydCBUTFMgUlNBIFNIQTI1NiAyMDIwIENBMTAeFw0yMzAxMTIwMDAwMDBa
Fw0yMzA1MjQyMzU5NTlaMHIxCzAJBgNVBAYTAkZSMRYwFAYDVQQIEw1JbGUgZGUg
RnJhbmNlMRIwEAYDVQQHEwlNT05UUkVVSUwxFzAVBgNVBAoTDkJOUCBQQVJJQkFT
IFNBMR4wHAYDVQQDExVibnAwOHMuYm5wcGFyaWJhcy5jb20wWTATBgcqhkjOPQIB
BggqhkjOPQMBBwNCAAS0Zm8eP1XS3k0MQhoWyz6TnO9TIKfF0E54r6SHiDlh5YJ1
LvndX4/W7Nqkz+juhrCnUfADmhwwCNBB5kQcED2+o4IOLzCCDiswHwYDVR0jBBgw
FoAUt2ui6qiqhIx56rTaD5iyxZV2ufQwHQYDVR0OBBYEFJ9nVOZUTQiTe5c3ENUJ
pqc5wMcYMIIK1wYDVR0RBIIKzjCCCsqCFWJucDA4cy5ibnBwYXJpYmFzLmNvbYIY
YWdvcmEtcHJkLmJucHBhcmliYXMuY29tgh9hbGlzLnYxNi5kZXYuc3RhZ2luZy5i
bnBwYXJpYmFzghphbnRpbGxlcy1ndXlhbmUuYm5wcGFyaWJhc4ITYXBpLmFscGhh
Lm5pY2tlbC5ldYIRYXBpLmRldi5uaWNrZWwuZXWCE2FwcC5hbHBoYS5uaWNrZWwu
ZXWCI2Fzc2luYXR1cmFkaWdpdGFsLmJucHBhcmliYXMuY29tLmJyghJiMmN0ZXN0
LmVjcmVkaXQuaXSCCWJpY2lhYi5iZoIOYmljaWJvdXJzZS5jb22CC2JpY2lndWku
b3JngiVibnBwYW0tcHJpdmF0ZS5zdGFnaW5nLmJucHBhcmliYXMuY29tgg1ibnBw
YXJpYmFzLm5jgg1ibnBwYXJpYmFzLnJlghhib2xldG8uYm5wcGFyaWJhcy5jb20u
YnKCD2J1c2luZXNzLmJubC5pdIIVY2FyLmJucHBhcmliYXMtYW0uY29tgiJjZW50
cmFsLmFudGlsbGVzLWd1eWFuZS5ibnBwYXJpYmFzghhjb25uZXhpb24uZXJlLmJu
cHBhcmliYXOCIGNvbm5leGlvbi5lcmUuc3RhZ2luZy5ibnBwYXJpYmFzghNjb3Jw
b3JhdGVzYWMuYm5sLml0ghpjb3Jwb3JhdGVzYWNhZW1jb2xsLmJubC5pdIIOY3Jl
ZGl0Y2xpY2suZnKCFmN0cy1scmEuYm5wcGFyaWJhcy5jb22COWRlbW8tZGlyZWN0
ZW8uZXBhcmduZS1yZXRyYWl0ZS1lbnRyZXByaXNlcy5ibnBwYXJpYmFzLmNvbYIe
ZGVtby1tb25lcGFyZ25lLmVyZS5ibnBwYXJpYmFzgiZkZW1vLW1vbmVwYXJnbmUu
ZXJlLnN0YWdpbmcuYm5wcGFyaWJhc4IeZGVtby1tb25lcmUtYXBpLmVyZS5ibnBw
YXJpYmFzgiZkZW1vLW1vbmVyZS1hcGkuZXJlLnN0YWdpbmcuYm5wcGFyaWJhc4I5
ZGVtby1wZXJzb25lby5lcGFyZ25lLXJldHJhaXRlLWVudHJlcHJpc2VzLmJucHBh
cmliYXMuY29tgjRkaXJlY3Rlby5lcGFyZ25lLXJldHJhaXRlLWVudHJlcHJpc2Vz
LmJucHBhcmliYXMuY29tgjdkb2N1bWVudGV4Y2hhbmdlY29ubmVjdC1pbnRlcm5l
dC5zc28tc3RnLmJucHBhcmliYXMuY29tgiZkb2N1bWVudGV4Y2hhbmdlY29ubmVj
dC5ibnBwYXJpYmFzLmNvbYIeZWJyb2tlci5zeWdtYWJucHBhcmliYXMtcGYuY29t
gidlcmVjZWlwdDJjZW50cmljLWNuLmFzaWEuYm5wcGFyaWJhcy5jb22CJGVyZWNl
aXB0MmNlbnRyaWMuYXNpYS5ibnBwYXJpYmFzLmNvbYIeZXJlcG9ydGluZy5hc2lh
LmJucHBhcmliYXMuY29tghZmeHBiLWRyLmJucHBhcmliYXMuY29tghtmeHBiLnN0
YWdpbmcuYm5wcGFyaWJhcy5jb22CFWdlcy1wYi5ibnBwYXJpYmFzLmNvbYISZ2Vz
LmJucHBhcmliYXMuY29tghppcmItY2VudHJhbC5ibnBwYXJpYmFzLmNvbYIOanNz
LmJucHBhcmliYXOCGG1ic3dsLXVhdC5ibnBwYXJpYmFzLmNvbYIUbWJzd2wuYm5w
cGFyaWJhcy5jb22CFm1lZGlhLnlvdW1hbmlzdC5ibmwuaXSCEm1lZGlhLnlvdW1h
bmlzdC5pdIITbWVkaWFuYS5pZml0YWxpYS5pdII7bW9iaWxlLnBlcnNvbmVvLmVw
YXJnbmUtcmV0cmFpdGUtZW50cmVwcmlzZXMuYm5wcGFyaWJhcy5jb22CGW1vbmVw
YXJnbmUuZXJlLmJucHBhcmliYXOCIW1vbmVwYXJnbmUuZXJlLnN0YWdpbmcuYm5w
cGFyaWJhc4IXbW9uaXRvci5wcmltZWJyb2tlci5jb22CFG15ZnB4LmJucHBhcmli
YXMuY29tghdvbXMtdWF0LnByaW1lYnJva2VyLmNvbYI0cGVyc29uZW8uZXBhcmdu
ZS1yZXRyYWl0ZS1lbnRyZXByaXNlcy5ibnBwYXJpYmFzLmNvbYIfcG9ydGFsZGln
aXRhbC5ibnBwYXJpYmFzLmNvbS5icoIhcHJpdmF0ZS5zdGFnaW5nLmJucHBhcmli
YXMtYW0uY29tghxwcml2YXRlYmFua2luZy5ibnBwYXJpYmFzLml0ghxwcml2YXRl
YmFua2luZ2FlbWNvbGwuYm5sLml0gihyYXBwb3J0LXN1c3RhaW5hYmlsaXR5LmJu
cHBhcmliYXMtYW0uY29tgiByZWNlYml2ZWlzLXN0Zy5ibnBwYXJpYmFzLmNvbS5i
coIZcmVjZWJpdmVpcy5ibnBwYXJpYmFzLmNvbYInc2dyYm9sZXRvaXNzdWFuY2Ut
c3RnLmJucHBhcmliYXMuY29tLmJygj1zc290ZXN0cy1kaXJlY3Rlby5lcGFyZ25l
LXJldHJhaXRlLWVudHJlcHJpc2VzLmJucHBhcmliYXMuY29tgitzdGFnaW5nLndv
cmtzcGFjZS5yZWFsZXN0YXRlLmJucHBhcmliYXMuY29tghVzdGdnZXMuYm5wcGFy
aWJhcy5jb22CJ3N1c3RhaW5hYmlsaXR5LXJlcG9ydC5ibnBwYXJpYmFzLWFtLmNv
bYIWc3lnbWFibnBwYXJpYmFzLXBmLmNvbYIldGhhaWxhbmRzb2NpYWxzZWN1cml0
eS5ibnBwYXJpYmFzLmNvbYItdGhhaWxhbmRzb2NpYWxzZWN1cml0eS5zdGFnaW5n
LmJucHBhcmliYXMuY29tgiR1cy1pc3N1aW5nLnBheWluZy5yZWMuYm5wcGFyaWJh
cy5jb22CEnZyYS5ibnBwYXJpYmFzLmNvbYIed3d3LmFudGlsbGVzLWd1eWFuZS5i
bnBwYXJpYmFzgid3d3cuYXNzaW5hdHVyYWRpZ2l0YWwuYm5wcGFyaWJhcy5jb20u
YnKCDXd3dy5iaWNpYWIuYmaCEnd3dy5iaWNpYm91cnNlLmNvbYIPd3d3LmJpY2ln
dWkub3JnghF3d3cuYm5wcGFyaWJhcy5uY4IRd3d3LmJucHBhcmliYXMucmWCJnd3
dy5jZW50cmFsLmFudGlsbGVzLWd1eWFuZS5ibnBwYXJpYmFzghJ3d3cuY3JlZGl0
Y2xpY2suZnKCGnd3dy5jdHMtbHJhLmJucHBhcmliYXMuY29tgh53d3cuaXJiLWNl
bnRyYWwuYm5wcGFyaWJhcy5jb22CF3d3dy5tZWRpYW5hLmlmaXRhbGlhLml0giN3
d3cucG9ydGFsZGlnaXRhbC5ibnBwYXJpYmFzLmNvbS5icoIgd3d3LnByaXZhdGVi
YW5raW5nLmJucHBhcmliYXMuaXSCIHd3dy5wcml2YXRlYmFua2luZ2FlbWNvbGwu
Ym5sLml0gix3d3cucmFwcG9ydC1zdXN0YWluYWJpbGl0eS5ibnBwYXJpYmFzLWFt
LmNvbYIrd3d3LnN1c3RhaW5hYmlsaXR5LXJlcG9ydC5ibnBwYXJpYmFzLWFtLmNv
bTAOBgNVHQ8BAf8EBAMCB4AwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMC
MIGPBgNVHR8EgYcwgYQwQKA+oDyGOmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9E
aWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5jcmwwQKA+oDyGOmh0dHA6Ly9j
cmw0LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFRMU1JTQVNIQTI1NjIwMjBDQTEtNC5j
cmwwPgYDVR0gBDcwNTAzBgZngQwBAgIwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMH8GCCsGAQUFBwEBBHMwcTAkBggrBgEFBQcwAYYY
aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEkGCCsGAQUFBzAChj1odHRwOi8vY2Fj
ZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRUTFNSU0FTSEEyNTYyMDIwQ0ExLTEu
Y3J0MAkGA1UdEwQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AOg+0No+
9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhafKKE0AAAQDAEgwRgIhAPte
SRKFFfoITjuelPV+VS7G96a9qMtTr1AaO62k0cmFAiEA9dwnSwsawiJn66ksnQGu
o5nNDqWShs5164qPJtvw0EYAdwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMO
eTalmgAAAYWnyikrAAAEAwBIMEYCIQDe61WYzvW4OVyF/81cqVTrM6y+nKCo0HQz
QzISJ4s/agIhAKEyj8eH63zCpkKdoTsfOFih7e33r8ecqqVG9Fe80oLkAHUAtz77
JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGFp8ooeQAABAMARjBEAiBZ
NrGDk1rEh2Tr7t4sCuNzWvp4VqDwjU9OFgKvzt3XGAIgUTSEgke7lbwuTvFLKj70
/nU2pDAhYNg77YpS3h8v12UwDQYJKoZIhvcNAQELBQADggEBAHrMc1WjInl4FRhB
jskSgSit3qN3uRQbEiEgx5aArkfsczGdZhvinqsQ9VQgrH7wZK5G1hGSg0vlLPrN
94QF5x27VV3zqi0clUgW5SRrZIpFU0fMMJS0ETCQPajZ40M0IxKwvTojBf+Hk55U
zWAqhZorxfEWQKPlzgCY07bVdnqmr2c1xd8remRcEI7/PuoJ9QJvkzTt7ypOER1D
IConJ02deI57cN9iAv3b/AxAw4TQUGDN0YedCpFl+r6q5DASR6VU/r3W1ZkJpu2S
xtiHVvS4/su8adHefLIvSqwJ6I+aUkGrhbR8yRqIRzgH0if98nDK8XMpk8HuFSjl
e6hut4k=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEtGZvHj9V0t5NDEIaFss+k5zvUyCn
xdBOeK+kh4g5YeWCdS753V+P1uzapM/o7oawp1HwA5ocMAjQQeZEHBA9vg==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1751357416045356272666725948402723411
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile de France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp08s.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004b4666f1e3f55d2de4d0c421a16cb3e939cef5320a7c5d04e78afa487883961e582752ef9dd5f8fd6ecdaa4cfe8ee86b0a751f0039a1c3008d041e6441c103dbe
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9f6754e6544d08937b973710d509a6a739c0c718
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2766 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp08s.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-prd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alis.v16.dev.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.alpha.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.alpha.nickel.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b2ctest.ecredit.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'biciab.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bicigui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnppam-private.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'boleto.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'car.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connexion.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatesac.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corporatesacaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-monere-api.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'demo-personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect-internet.sso-stg.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'documentexchangeconnect.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebroker.sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric-cn.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereceipt2centric.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ereporting.asia.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb-dr.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxpb.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jss.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl-uat.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbswl.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.youmanist.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile.personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monepargne.ere.staging.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'monitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myfpx.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oms-uat.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'personeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'private.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recebiveis.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sgrboletoissuance-stg.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssotests-directeo.epargne-retraite-entreprises.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.workspace.realestate.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sygmabnpparibas-pf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thailandsocialsecurity.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-issuing.paying.rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.assinaturadigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.biciab.bf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicibourse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bicigui.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.nc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas.re'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.central.antilles-guyane.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditclick.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cts-lra.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.irb-central.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mediana.ifitalia.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.portaldigital.bnpparibas.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebanking.bnpparibas.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.privatebankingaemcoll.bnl.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rapport-sustainability.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sustainability-report.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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