bnp02tpc.bnpparibas.com

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 29:e4:ae:e9:4a:6d:0c:ad:35:01:cd:31:12:19:18:f6 was issued on by Entrust, Inc..

With 82 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 29:e4:ae:e9:4a:6d:0c:ad:35:01:cd:31:12:19:18:f6
Serial Number (int): 55685739133394116207227077174819887350
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 94:27:f4:2c:bb:ca:28:e0:31:72:b1:dc:4a:5c:54:48:df:55:53:01
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 95:77:91:55:19:53:cd:cb:bc:2f:08:17:8b:30:77:a0:31:cc:54:37
Fingerprint (sha256): 00:b5:fa:b8:f1:a2:5b:3e:18:eb:2f:63:c7:e6:2e:0c:60:c3:90:a3:4e:27:68:f6:de:0c:fe:8e:a4:9e:56:e5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate bnp02tpc.bnpparibas.com

82

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bnp02tpc.bnpparibas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bnp02tpc.bnpparibas.com
www.pprod-ncal.mabanque.bnpparibas
www.creditfyedi.staging.bnpparibas.ma
www.wave.cardif.de
www.mabanquenouvellecaledonie.bnpparibas
pprod.mabanquewallisetfutuna.bnpparibas
mbank.bnpparibas.ma
sit1-olb.consorsfinanz.at
www.creditfyedi.cms.staging.bnpparibas.ma
www.wavetest.cardif.de
www.mbank.bnpparibas.ma
qw.staging.mabanquewallisetfutuna.bnpparibas
www.creditfyedi.bmci.ma
int.ncal.staging.mabanque.bnpparibas
neo-auth-u1.consorsbank.de
edc-wave.cardif.de
uat1-olb.consorsfinanz.de
www.edc-wavedemo.cardif.de
www.apps.staging.bmci.bnpparibas.ma
svrbzfzd.cetelem.es
produkte.cardif.de
qua.ncal.staging.mabanque.bnpparibas
mobile-api.bnpparibas.de
www.mabanquewallisetfutuna.bnpparibas
www.iw.staging.mabanquewallisetfutuna.bnpparibas
creditfyedi.cms.staging.bnpparibas.ma
www.mydigibank.bnpparibas.dz
eat.consorsbank.de
bmciconnect.ma
www.apps.staging.irbhomelab.bnpparibas
www.pprod.mabanquewallisetfutuna.bnpparibas
svrbzfzdts.cetelem.es
mobile-api-u1.consorsbank.de
prod1-olb.consorsfinanz.at
www.espaceclient-creditconso.bmci.ma
edc-wavetest.cardif.de
pprod-ncal.mabanque.bnpparibas
www.wavedemo.cardif.de
www.int.ncal.staging.mabanque.bnpparibas
www.testcapri.cardif.de
int2-at.consorsbank.de
www.edc-wave.cardif.de
wave.cardif.de
apps.staging.irbhomelab.bnpparibas
olb.consorsfinanz.at
neo-auth-u0.consorsbank.de
edc-wavedemo.cardif.de
creditfyedi.bmci.ma
www.qw.staging.mabanquewallisetfutuna.bnpparibas
www.apps.bmci.bnpparibas.ma
www.edc-wavetest.cardif.de
gedimmo-recette.bnpparibas.com
www.creditfyedi.qua.staging.bnpparibas.ma
creditfyedi.qua.staging.bnpparibas.ma
mabanquewallisetfutuna.bnpparibas
at.consorsbank.de
wavedemo.cardif.de
www.qua.ncal.staging.mabanque.bnpparibas
www.creditconso.bmci.ma
creditfyedi.staging.bnpparibas.ma
mabanquenouvellecaledonie.bnpparibas
creditfyedi.cms.qua.staging.bnpparibas.ma
apps.bmci.bnpparibas.ma
www.produkte.cardif.de
www.bmciconnect.ma
uat1-olb.consorsfinanz.at
creditconso.bmci.ma
prod1-olb.consorsfinanz.de
mydigibank.bnpparibas.dz
capri.cardif.de
olb.consorsfinanz.de
www.creditfyedi.cms.qua.staging.bnpparibas.ma
neo-auth.consorsbank.de
apps.staging.bmci.bnpparibas.ma
wavetest.cardif.de
espaceclient-creditconso.bmci.ma
www.capri.cardif.de
testcapri.cardif.de
int2-eat.consorsbank.de
auth.consorsbank.de
iw.staging.mabanquewallisetfutuna.bnpparibas
mobile-api-u0.consorsbank.de

Other certificates including the domain name bnpparibas.com

(limited to 100 certificates)
bnp16b.bnpparibas.com
porta.bnpparibas.com
bnp04s.bnpparibas.com
bnp05b.bnpparibas.com
bnp12b.bnpparibas.com
bnp11b.bnpparibas.com
dna-wp.bnpparibas.com
pls-mytools-rec3.staging.bnpparibas.com
cdx-rec.bnpparibas.com
us-cortex.bnpparibas.com
planetshares-mytools.bnpparibas.com
eqd-globalmarkets.bnpparibas.com
securitiesrec-bluegreen.bnpparibas.com
vulcan-brio.sso-stg.bnpparibas.com
bnp02tpc.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
www.vendor-academy.leasingsolutions.bnpparibas.com
www.cards.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
group.bnpparibas.com
wow.bnpparibas.com
apis.bcef.caledonie.bnpparibas.com
indices-globalmarkets.bnpparibas.com
connexissupplychain.uat3.bnpparibas.com
clientportfolio.smartderivatives.bnpparibas.com
us-cortexfx.bnpparibas.com
europagoderec2.bnpparibas.com
bnp02tpc.bnpparibas.com
bnp05s.bnpparibas.com
bnp09b.bnpparibas.com
auth.staging.bnpparibas.com
bnp07s.bnpparibas.com
eqresearch.bnpparibas.com
front-rec.bnpparibas.com
www.gps-protocol.bnpparibas.com
india-netpay.bnpparibas.com
apac-faststream02.bnpparibas.com
mymobility-qual.staging.bnpparibas.com
bnp03sw.bnpparibas.com
imactions.uat.bnpparibas.com
bnp05b.bnpparibas.com
welcome-qual.staging.bnpparibas.com
connexissupplychain.uat1.bnpparibas.com
gctabsreporting-staging.bnpparibas.com
expe-122-opf.bnpparibas.com
bnp13b.bnpparibas.com
connexistrade-ls.bnpparibas.com
cxt-uat-ls.bnpparibas.com
staging.intdistrib-am.bnpparibas.com
brio.sso-stg.bnpparibas.com
int-qa2-cciweb.bnpparibas.com
sinmail3.asia.bnpparibas.com
bnp06s.bnpparibas.com
bnp05s.bnpparibas.com
entreprises.ere.bnpparibas
2016-u.leasingsolutions.bnpparibas.com
bnp07b.bnpparibas.com
smartderivatives.bnpparibas.com
account.onebank.bnpparibas.com
bnppf-dgi-collection.bnpparibas.com
fr-sdpp-prd-internet-stream01.bnpparibas.com
bnp07b.bnpparibas.com
int-bfx-newscci.bnpparibas.com
bnp03s.bnpparibas.com
bnp19b.bnpparibas.com
marketlinkedproducts.bnpparibas.com
wealthmanagement-staging.bnpparibas.com
wsgateway.bnpparibas.com
jp-cortexfx.bnpparibas.com
bnp01sw.bnpparibas.com
securitiesrec-link.bnpparibas.com
bnp09b.bnpparibas.com
bnp04s.bnpparibas.com
rewardsatwork.be
www.bnpparibas.com.br
spotbuying.mediaprocessing.bnpparibas.com
group.bnpparibas
clientportfolio.smartderivatives.bnpparibas.com
cce.bnpparibas.com
cdc-securities-link.portail-investisseur.com
markets360-test.bnpparibas.com
www.privalto.fr
push.connexiscash.bnpparibas.com
bnp09s.bnpparibas.com
matisse-compta.bnpparibas.com
ews-itg-ext.test.bnpparibas.com
www.primebroker.com
obbligazioni.bnpparibas.com
webtrends.bnpparibas.com
fao.bnpparibas.com
dna-promoter.bnpparibas.com
globalmarkets-pp.bnpparibas.com
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
cardif-asia-demo.dev.bnpparibas.com
bnp03s.bnpparibas.com
push.bnpparibas.com
bnp19b.bnpparibas.com
keys.bnpparibas.com
sinmail4.asia.bnpparibas.com

Certificate

The complete raw certificate details for bnp02tpc.bnpparibas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquBHqZI9I4D+x5sMYweo
FQOpAic1tWeAkQ363haOX+bkzTr/kDWNbrHjJuQ5HJenOOejp2/4mXHqlmPEPsQd
N/WWnQJBtAVBEULAC0nVoAX6hIoCpwiW1YXlOLT7PWgbrY/YB7ZbR5nayewFvptu
V4ltqC4B8GlK4JiNWbG/CSkbpRxYmpZL+cADKIbix879b/kVVZlsGw/v0+c8xr0p
snKLTH4Bi4ncJI129cofvACvV2CMIMElWFiY0TGGGVviI8rRmAtHkLJTXJuJcrlq
WS/fx+nfhZfjjBovfByTaAJ96UA8RMhMvIlObL6iB0SdchsdC5aP1gDHulEZam0O
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 55685739133394116207227077174819887350
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-13 15:37:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-13 15:37:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bnp02tpc.bnpparibas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21571108400295698745008633597343806452571109443753852122967616676975010980051815774246773402131367052332027738793027006344138095619760044929491072249478074894089235842502303126583994823852736817726681863767490230854455475398090496127896136026461049697152747673151432025912871928505017944203408063167404230433407242678990577533656084639915848084169471725665209186363751673233184253292319169657382484540551647553048312964996603953065856046827109098553268514953638987188296205477603837498618349409076029766389415025815830826954894947908845003079847023609496096720810172849646225662467134987392274823010081039280551825043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9427f42cbbca28e03172b1dc4a5c5448df555301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2452 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bnp02tpc.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pprod-ncal.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditfyedi.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mabanquenouvellecaledonie.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pprod.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mbank.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit1-olb.consorsfinanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditfyedi.cms.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mbank.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qw.staging.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditfyedi.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int.ncal.staging.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo-auth-u1.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1-olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps.staging.bmci.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svrbzfzd.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'produkte.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qua.ncal.staging.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-api.bnpparibas.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iw.staging.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditfyedi.cms.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mydigibank.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eat.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmciconnect.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps.staging.irbhomelab.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pprod.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svrbzfzdts.cetelem.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-api-u1.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-olb.consorsfinanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.espaceclient-creditconso.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pprod-ncal.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.int.ncal.staging.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.testcapri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int2-at.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wave.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.staging.irbhomelab.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olb.consorsfinanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo-auth-u0.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edc-wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditfyedi.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qw.staging.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apps.bmci.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edc-wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gedimmo-recette.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditfyedi.qua.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditfyedi.qua.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'at.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavedemo.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.qua.ncal.staging.mabanque.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditconso.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditfyedi.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mabanquenouvellecaledonie.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditfyedi.cms.qua.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.bmci.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.produkte.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmciconnect.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat1-olb.consorsfinanz.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'creditconso.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod1-olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mydigibank.bnpparibas.dz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'olb.consorsfinanz.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.creditfyedi.cms.qua.staging.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neo-auth.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.staging.bmci.bnpparibas.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wavetest.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'espaceclient-creditconso.bmci.ma'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.capri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testcapri.cardif.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int2-eat.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.consorsbank.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iw.staging.mabanquewallisetfutuna.bnpparibas'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobile-api-u0.consorsbank.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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