bnp16b.bnpparibas.com

- BNP PARIBAS SA -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:55:33:e9:86:4c:e7:3b:46:a8:8c:2e:6d:37:ce:80 was issued on by DigiCert Inc.

With 80 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
State / Province: Île-de-France
Locality: MONTREUIL
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:55:33:e9:86:4c:e7:3b:46:a8:8c:2e:6d:37:ce:80
Serial Number (int): 12405450099655316901799504109140168320
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b6:86:bf:5a:bf:37:86:6e:74:b6:51:68:23:fe:14:8d:32:5d:cc:87
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 29:9c:21:6d:ab:37:c1:48:19:6a:b2:e5:c5:9c:f4:2e:88:f3:2e:af
Fingerprint (sha256): 00:17:f1:ff:21:51:b2:e7:3a:50:ed:10:6b:58:08:da:e9:8e:c8:43:14:dd:4a:63:6e:84:4f:b2:25:2e:34:af

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate bnp16b.bnpparibas.com

80

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp16b.bnpparibas.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp16b.bnpparibas.com
agora-ppd.bnpparibas.com
agora-rec.bnpparibas.com
api.staging.bnpparibas-am.com
app.atelier.net
atelier.bnpparibas
atelier.fr
atelier.net
bnpparibas-am.co.id
bnpparibas-am.com.mx
bnpparibas-am.com.my
bnpparibas-am.mx
cafineo.fr
cash-cib.bnpparibas.es
cdx-rec.bnpparibas.com
cdxp-rec.bnpparibas.com
cetelem-hm-speed.neuges.org
cetelem-hn-speed.neuges.org
cetelem-rt-speed.neuges.org
chatbot.bnpparibas-am.com
component-studio.bnpparibas-am.com
component-studio.staging.bnpparibas-am.com
creditmoderne-hm-speed.neuges.org
creditmoderne-rt-speed.neuges.org
e-console.bnpparibas-am.com
espaceclient-hom-2.cofinoga.fr
espaceclient-prod2.cofinoga.fr
files.atelier.fr
fr-mfa-cardif-pp.api.bnpparibas
fr-mfa-cardif.api.bnpparibas
france-titrisation.staging.bnpparibas.com
france-titrisation.staging.bnpparibas.fr
gctabsreporting-staging.bnpparibas.com
hm.portail-outils-partenaires.fr
hom.cafineo.fr
hom.credit-moderne.com
hom2.cafineo.fr
homol-webpartners.neuges.org
hypoprotect.cardif.be
institutional.bnpparibas-am.com
investment-city-banquepriveefrance.bnpparibas-am.fr
investo.bnpparibas
investors-corner.bnpparibas-am.com
kokuchi-kanri-staging.cardif.co.jp
kokuchi-staging.cardif.co.jp
lite-rec.bnpparibas.com
mediaroom-en.bnpparibas-am.com
preview.bnpparibas-am.com
prod.cafineo.fr
rct.cafineo.fr
rct.credit-moderne.com
rec.cofinoga.fr
recette-cpay-cetelem.neuges.org
recette-webpartners-cetelem-net.neuges.org
recette.portail-outils-partenaires.fr
rt.cofinoga.fr
sifbasweb.bnpparibas-am.mx
sifbasweb.bnpparibas-ip.mx
smeaf-gatewayapi.staging.bnpparibas-am.com
smeaf-identityserver.bnpparibas-am.com
smeaf-identityserver.staging.bnpparibas-am.com
smeaf-notificationservice.bnpparibas-am.com
smeaf-notificationservice.staging.bnpparibas-am.com
smeaf.staging.bnpparibas-am.com
staging.bnpparibas-am.co.id
testwscrm.bnpparibas-am.com
wm-hn-speed.neuges.org
wscrm.bnpparibas-am.com
www.app.atelier.net
www.atelier.bnpparibas
www.atelier.fr
www.atelier.net
www.bnpparibas-am.co.id
www.bnpparibas-am.com.mx
www.bnpparibas-am.com.my
www.bnpparibas-am.mx
www.cafineo.fr
www.cash-cib.bnpparibas.es
www.espaceclient-prod2.cofinoga.fr
www.files.atelier.fr

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com
connexisdirect.api.staging.bnpparibas.com
centric-vasco.bnpparibas.com
securitiesrec-client.bnpparibas.com
tlcx-tempo.bnpparibas.com
centric.bnpparibas.com
bnp19b.bnpparibas.com
bnp06s.bnpparibas.com

Certificate

The complete raw certificate details for bnp16b.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEmMjk1f0xmphw7GMbhexbs0wo9V5p
KBmHkuAVF4gHKNB2JJm6p/8pJIt0pGpDHxiwdLveHQs5RL9bRzuT/hCrSQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12405450099655316901799504109140168320
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MONTREUIL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp16b.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				000498c8e4d5fd319a9870ec631b85ec5bb34c28f55e6928198792e01517880728d0762499baa7ff29248b74a46a431f18b074bbde1d0b3944bf5b473b93fe10ab49
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b686bf5abf37866e74b6516823fe148d325dcc87
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2250 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp16b.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-ppd.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agora-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.atelier.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelier.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atelier.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnpparibas-am.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdx-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdxp-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-hm-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-hn-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cetelem-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chatbot.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'component-studio.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'component-studio.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditmoderne-hm-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditmoderne-rt-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-console.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient-hom-2.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient-prod2.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'files.atelier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mfa-cardif-pp.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fr-mfa-cardif.api.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'france-titrisation.staging.bnpparibas.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gctabsreporting-staging.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hm.portail-outils-partenaires.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hom2.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homol-webpartners.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hypoprotect.cardif.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'institutional.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investment-city-banquepriveefrance.bnpparibas-am.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investo.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investors-corner.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokuchi-kanri-staging.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kokuchi-staging.cardif.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lite-rec.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mediaroom-en.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preview.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rct.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rct.credit-moderne.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rec.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-cpay-cetelem.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette-webpartners-cetelem-net.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recette.portail-outils-partenaires.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rt.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sifbasweb.bnpparibas-am.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sifbasweb.bnpparibas-ip.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf-gatewayapi.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf-identityserver.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf-identityserver.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf-notificationservice.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf-notificationservice.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smeaf.staging.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.bnpparibas-am.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testwscrm.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wm-hn-speed.neuges.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscrm.bnpparibas-am.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.app.atelier.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelier.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelier.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.atelier.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.co.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bnpparibas-am.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cafineo.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cash-cib.bnpparibas.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaceclient-prod2.cofinoga.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.files.atelier.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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