Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:0f:9b:b4:52:d6:78:50:c7:1a:88:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: C=BE, O=GlobalSign nv-sa, CN=GlobalSign Extended Validation CA - SHA256 - G3
Validity
Not Before: May 7 13:31:08 2019 GMT
Not After : Jul 6 14:41:02 2020 GMT
Subject: businessCategory=Private Organization/serialNumber=800008561/jurisdictionC=PY, C=PY, ST=Asuncion, L=Asuncion/street=Independencia Nacional esq. Cerro Cora, O=BANCO NACIONAL DE FOMENTO, CN=www.bnf.gov.py
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
Public-Key: (2048 bit)
Modulus:
00:b1:50:0c:fa:6c:c3:60:80:1d:8a:ad:2c:c6:15:
3f:1a:a3:3d:38:61:57:12:34:a9:ec:73:f7:c9:2e:
e2:7a:bb:6a:32:dc:98:21:67:26:39:2e:a3:f7:24:
85:eb:6c:0b:7c:17:d2:ee:f4:5e:3c:36:00:a4:2d:
0e:1a:5e:96:a0:05:05:70:a3:37:49:8d:fb:fd:81:
5d:10:cb:29:13:df:1b:67:86:6f:49:ad:bd:b0:f9:
d0:9f:81:fc:82:d5:f7:af:1c:b2:ed:e2:57:e5:7c:
24:93:ec:72:6c:db:ea:dc:17:3b:2f:6f:7d:72:a6:
f1:ee:2f:32:14:00:2c:96:25:77:e2:47:d3:b8:a6:
28:46:00:f9:53:98:89:54:70:5b:47:88:8c:66:57:
97:cf:9e:64:df:3a:c7:ef:d6:08:bb:cd:7c:83:d7:
53:46:6d:e0:4e:25:29:38:2c:c8:61:7f:7a:18:99:
63:70:e7:5c:0a:35:e6:ff:7b:e9:c9:fa:65:ab:ba:
00:de:4b:65:7f:cc:4e:aa:21:7b:54:4a:5b:a9:dd:
ee:3e:3f:b8:65:36:8a:ce:83:15:ba:6d:18:6e:d2:
d5:96:8c:47:dc:b3:e7:c8:ba:41:93:e6:9c:d6:25:
ac:3c:24:8a:69:d8:1b:d4:37:07:28:d1:cc:79:94:
6f:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Key Usage: critical
Digital Signature, Key Encipherment
Authority Information Access:
CA Issuers - URI:http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt
OCSP - URI:http://ocsp2.globalsign.com/gsextendvalsha2g3r3

X509v3 Certificate Policies:
Policy: 1.3.6.1.4.1.4146.1.1
CPS: https://www.globalsign.com/repository/
Policy: 2.23.140.1.1

X509v3 Basic Constraints:
CA:FALSE
X509v3 Subject Alternative Name:
DNS:www.bnf.gov.py, DNS:bnf.gov.py
X509v3 Extended Key Usage:
TLS Web Server Authentication, TLS Web Client Authentication
X509v3 Subject Key Identifier:
CC:CA:8B:3E:D6:C8:60:E3:7C:9E:BB:06:5B:63:EC:50:DD:2F:2F:5D
X509v3 Authority Key Identifier:
keyid:DD:B3:E7:6D:A8:2E:E8:C5:4E:6E:CF:74:E6:75:3C:94:15:CE:E8:1D

CT Precertificate SCTs:
Signed Certificate Timestamp:
Version : v1(0)
Log ID : EE:4B:BD:B7:75:CE:60:BA:E1:42:69:1F:AB:E1:9E:66:
A3:0F:7E:5F:B0:72:D8:83:00:C4:7B:89:7A:A8:FD:CB
Timestamp : May 7 13:31:10.339 2019 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:45:02:21:00:D9:FD:18:1B:5A:A4:B0:C0:72:61:21:
91:8F:26:16:A3:0F:F7:DC:57:4B:F8:25:4F:AA:85:66:
66:F2:AD:B5:5E:02:20:58:79:2E:05:6B:72:8E:69:B4:
97:3B:B5:3F:BA:F9:69:A4:75:D3:8E:99:CA:5A:54:19:
4B:59:54:92:43:11:6D
Signed Certificate Timestamp:
Version : v1(0)
Log ID : 6F:53:76:AC:31:F0:31:19:D8:99:00:A4:51:15:FF:77:
15:1C:11:D9:02:C1:00:29:06:8D:B2:08:9A:37:D9:13
Timestamp : May 7 13:31:10.398 2019 GMT
Extensions: none
Signature : ecdsa-with-SHA256
30:46:02:21:00:94:42:1A:78:13:58:F1:49:E5:7D:66:
C8:0C:89:44:70:98:B0:D5:1F:03:C8:3E:E7:9B:51:74:
25:3D:16:C7:C0:02:21:00:B7:D3:2F:E0:4C:53:10:B0:
3A:1F:28:F7:0B:49:2B:72:77:84:41:D6:88:BD:51:93:
AE:77:F0:27:D2:1C:90:CF
Signature Algorithm: sha256WithRSAEncryption
7a:b3:ec:47:24:fc:57:93:d7:8e:9e:6b:a8:30:1e:35:f8:97:
ac:4f:ae:7d:16:39:fe:85:14:41:d6:d2:80:c3:3e:3c:12:6d:
cb:49:f7:4d:d1:d0:22:0d:0d:a8:84:90:ba:02:75:c0:c6:63:
80:b0:4e:dd:31:c1:b0:78:05:a1:7d:7c:ba:67:3c:5d:b5:6e:
06:63:ba:5b:1d:52:88:9c:a5:b7:11:3c:c5:af:21:2a:e4:5c:
e7:c8:ca:5a:60:f5:f4:ef:0f:53:8d:43:4b:b7:87:57:e4:62:
9f:3e:e6:e6:d4:de:2d:3e:58:68:d1:0a:e6:03:0b:ea:84:c8:
af:8e:ca:5c:e7:e3:a0:c5:30:c1:a4:ce:37:42:40:dd:46:82:
ca:a8:d9:54:d7:1d:50:4a:65:db:11:7a:c8:60:0d:0d:ac:e9:
ae:04:de:75:b4:65:76:33:82:01:3a:f4:af:a0:3f:29:a7:71:
c7:6a:f4:cb:03:05:6e:eb:30:c7:8a:05:62:5a:3a:be:08:f3:
08:98:0b:37:44:fd:86:6e:e4:0a:fb:01:c1:cf:f2:55:c2:99:
c7:ac:d3:fe:cf:0d:c5:f2:3b:93:ca:e5:9c:b1:fe:93:a0:f3:
92:0e:44:41:e1:b0:b9:50:9f:26:54:70:81:8e:d7:62:0a:92:
39:f4:b4:46